Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/assets.yaml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/assets.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/assets.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/assets.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/assets.yaml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/assets.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/assets.yaml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/assets.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/assets.yaml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/assets.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/assets.yaml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/assets.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/assets.yaml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/assets.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/assets.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/assets.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:164: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yaml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:208: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:220: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yaml:221: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/gapic-showcase/ci.yaml/main?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:1
Warn: goCommand not pinned by hash: .github/workflows/assets.yaml:101
Warn: goCommand not pinned by hash: .github/workflows/assets.yaml:114
Warn: goCommand not pinned by hash: .github/workflows/ci.yaml:22
Warn: goCommand not pinned by hash: .github/workflows/ci.yaml:23
Warn: goCommand not pinned by hash: .github/workflows/ci.yaml:24
Warn: goCommand not pinned by hash: .github/workflows/ci.yaml:56
Warn: npmCommand not pinned by hash: .github/workflows/ci.yaml:170
Info: 0 out of 25 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 5 third-party GitHubAction dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned
Info: 3 out of 9 goCommand dependencies pinned
Info: 0 out of 1 npmCommand dependencies pinned