Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-pr.yml:7: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/check-pr.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-pr.yml:8: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/check-pr.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-boilerplate.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-boilerplate.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-boilerplate.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-boilerplate.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/knative-boilerplate.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-boilerplate.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-donotsubmit.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-donotsubmit.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-go-build.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-go-build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-go-build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-go-build.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/knative-go-build.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-go-build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-go-test.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-go-test.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-go-test.yaml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-go-test.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/knative-go-test.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-go-test.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/knative-go-test.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-go-test.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-releasability.yaml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-releasability.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-releasability.yaml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-releasability.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/knative-releasability.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-releasability.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-release-notes.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-release-notes.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-release-notes.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-release-notes.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-release-notes.yaml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-release-notes.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-security.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-security.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-security.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-security.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-security.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-security.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-security.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-security.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-stale.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-stale.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-style.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-style.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-style.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-style.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-style.yaml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-style.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-style.yaml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-style.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/knative-style.yaml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-style.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/knative-style.yaml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-style.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-verify.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-verify.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/knative-verify.yaml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/google/knative-gcp/knative-verify.yaml/main?enable=pin
Warn: goCommand not pinned by hash: hack/update-codegen.sh:74
Warn: goCommand not pinned by hash: vendor/github.com/json-iterator/go/build.sh:10
Warn: goCommand not pinned by hash: vendor/github.com/pelletier/go-toml/benchmark.sh:10
Warn: goCommand not pinned by hash: vendor/github.com/pelletier/go-toml/fuzzit.sh:9
Warn: downloadThenRun not pinned by hash: vendor/github.com/pelletier/go-toml/fuzzit.sh:26
Warn: goCommand not pinned by hash: vendor/github.com/rickb777/plural/build+test.sh:7
Warn: goCommand not pinned by hash: vendor/google.golang.org/grpc/regenerate.sh:35
Warn: goCommand not pinned by hash: vendor/google.golang.org/grpc/vet.sh:39
Warn: goCommand not pinned by hash: vendor/google.golang.org/grpc/vet.sh:49
Warn: downloadThenRun not pinned by hash: vendor/knative.dev/eventing/test/e2e-common.sh:300
Warn: goCommand not pinned by hash: vendor/knative.dev/eventing/test/microbenchmarks-compare.sh:9
Warn: goCommand not pinned by hash: vendor/knative.dev/hack/microbenchmarks.sh:63
Warn: downloadThenRun not pinned by hash: .github/workflows/knative-boilerplate.yaml:60
Warn: goCommand not pinned by hash: .github/workflows/knative-boilerplate.yaml:64
Warn: downloadThenRun not pinned by hash: .github/workflows/knative-donotsubmit.yaml:46
Warn: goCommand not pinned by hash: .github/workflows/knative-releasability.yaml:64
Warn: goCommand not pinned by hash: .github/workflows/knative-release-notes.yaml:48
Warn: downloadThenRun not pinned by hash: .github/workflows/knative-style.yaml:109
Warn: goCommand not pinned by hash: .github/workflows/knative-style.yaml:113
Warn: downloadThenRun not pinned by hash: .github/workflows/knative-style.yaml:117
Warn: goCommand not pinned by hash: .github/workflows/knative-verify.yaml:51
Info: 0 out of 25 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 7 third-party GitHubAction dependencies pinned
Info: 5 out of 20 goCommand dependencies pinned
Info: 0 out of 6 downloadThenRun dependencies pinned