Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:315: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:317: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:460: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:472: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:520: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:521: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:522: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:533: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:233: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:250: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:451: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:502: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:503: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:276: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:302: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:337: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:393: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:401: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:402: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:206: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:368: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:374: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:420: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:421: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:425: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:484: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:566: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:570: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:163: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:173: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:383: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:442: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:349: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:351: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:551: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:552: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:582: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/docs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/docs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/docs.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/main.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/main.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/main.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/google/flatbuffers/stale.yml/master?enable=pin
Warn: containerImage not pinned by hash: tests/docker/Dockerfile.testing.build_flatc_debian_stretch:1
Warn: containerImage not pinned by hash: tests/docker/Dockerfile.testing.build_flatc_debian_stretch:4
Warn: containerImage not pinned by hash: tests/docker/Dockerfile.testing.cpp.debian_buster:1
Warn: containerImage not pinned by hash: tests/docker/Dockerfile.testing.cpp.debian_buster:6
Warn: containerImage not pinned by hash: tests/docker/TODO.Dockerfile.testing.php.hhvm_2019_01_16:10
Warn: containerImage not pinned by hash: tests/docker/TODO.Dockerfile.testing.python.pypy_6_0_0_py2:1
Warn: containerImage not pinned by hash: tests/docker/TODO.Dockerfile.testing.python.pypy_6_0_0_py3:1
Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.csharp.mono_5_18:1
Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.golang.1_11:1
Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.java.openjdk_10_0_2:1
Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.java.openjdk_11_0_1:1
Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.node.12_20_1:1
Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.node.14_15_4:1
Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.php.zend_7_3:1
Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.python.cpython_2_7_15:1
Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.python.cpython_3_7_1:1
Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.python.numpy.cpython_2_7_15:1
Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.python.numpy.cpython_3_7_1:1
Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.rust.1_51_0:1
Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.rust.big_endian.1_51_0:1
Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.rust.nightly:1
Warn: containerImage not pinned by hash: tests/docker/languages/Dockerfile.testing.swift_5_2:1: pin your Docker image by updating swift:5.2 to swift:5.2@sha256:eed194e951dea8d4e4925e1fc905c9b4a52f86f239af99aff699615618ca00b0
Warn: npmCommand not pinned by hash: tests/docker/languages/Dockerfile.testing.node.12_20_1:5
Warn: npmCommand not pinned by hash: tests/docker/languages/Dockerfile.testing.node.14_15_4:5
Warn: pipCommand not pinned by hash: tests/docker/languages/Dockerfile.testing.python.cpython_2_7_15:7
Warn: pipCommand not pinned by hash: tests/docker/languages/Dockerfile.testing.python.cpython_3_7_1:7
Warn: pipCommand not pinned by hash: tests/docker/languages/Dockerfile.testing.python.numpy.cpython_2_7_15:7
Warn: pipCommand not pinned by hash: tests/docker/languages/Dockerfile.testing.python.numpy.cpython_2_7_15:8
Warn: pipCommand not pinned by hash: tests/docker/languages/Dockerfile.testing.python.numpy.cpython_3_7_1:7
Warn: pipCommand not pinned by hash: tests/docker/languages/Dockerfile.testing.python.numpy.cpython_3_7_1:8
Warn: pipCommand not pinned by hash: .github/workflows/docs.yml:35
Warn: pipCommand not pinned by hash: .github/workflows/docs.yml:36
Warn: pipCommand not pinned by hash: .github/workflows/release.yml:39
Warn: pipCommand not pinned by hash: .github/workflows/release.yml:40
Info: 1 out of 53 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 19 third-party GitHubAction dependencies pinned
Info: 0 out of 22 containerImage dependencies pinned
Info: 0 out of 2 npmCommand dependencies pinned
Info: 0 out of 10 pipCommand dependencies pinned