Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/kaniko/integration-tests.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-vulnerability-scan.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleContainerTools/kaniko/nightly-vulnerability-scan.yml/main?enable=pin
Warn: containerImage not pinned by hash: deploy/Dockerfile:15
Warn: containerImage not pinned by hash: deploy/Dockerfile:58
Warn: containerImage not pinned by hash: deploy/Dockerfile:62
Warn: containerImage not pinned by hash: deploy/Dockerfile:76
Warn: containerImage not pinned by hash: deploy/Dockerfile:90
Warn: containerImage not pinned by hash: deploy/Dockerfile:96
Warn: containerImage not pinned by hash: deploy/Dockerfile:102
Warn: containerImage not pinned by hash: deploy/Dockerfile:115
Warn: containerImage not pinned by hash: integration/benchmark_fs/Dockerfile:14: pin your Docker image by updating bash:4.4 to bash:4.4@sha256:180cbc4fe4e040db4cc393e66bee4e5ab15231089d5b6bda5d3b788c8f197503
Warn: containerImage not pinned by hash: integration/dockerfiles-with-context/issue-1020/Dockerfile:15: pin your Docker image by updating atomist/sdm-base:0.4.1 to atomist/sdm-base:0.4.1@sha256:555a4f6fb9b0fb9d180e2e9a0bfcd04c44128cb76eca26516ccb7ba7dd304b5c
Warn: containerImage not pinned by hash: integration/dockerfiles-with-context/issue-1315/Dockerfile:15
Warn: containerImage not pinned by hash: integration/dockerfiles-with-context/issue-1315/Dockerfile:22: pin your Docker image by updating alpine:3.11 to alpine:3.11@sha256:bcae378eacedab83da66079d9366c8f5df542d7ed9ab23bf487e3e1a8481375d
Warn: containerImage not pinned by hash: integration/dockerfiles-with-context/issue-2075/Dockerfile:15
Warn: containerImage not pinned by hash: integration/dockerfiles-with-context/issue-2075/Dockerfile:16
Warn: containerImage not pinned by hash: integration/dockerfiles-with-context/issue-2075/Dockerfile:24
Warn: containerImage not pinned by hash: integration/dockerfiles-with-context/issue-57/Dockerfile:15: pin your Docker image by updating busybox to busybox@sha256:a5d0ce49aa801d475da48f8cb163c354ab95cab073cd3c138bd458fc8257fbf1
Warn: containerImage not pinned by hash: integration/dockerfiles-with-context/issue-721/Dockerfile:15: pin your Docker image by updating alpine to alpine@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
Warn: containerImage not pinned by hash: integration/dockerfiles-with-context/issue-774/Dockerfile:15: pin your Docker image by updating phusion/baseimage:0.11 to phusion/baseimage:0.11@sha256:6ba22a31a809de669243b79f982f7b2df733ead1ec45becff401b4d5d79150bb
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_onbuild_base:1: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_registry_mirror:18: pin your Docker image by updating library/debian:latest to library/debian:latest@sha256:4abf773f2a570e6873259c4e3ba16de6c6268fb571fd46ec80be7c67822823b3
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_add:1: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_add_404:1: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_add_dest_symlink_dir:1: pin your Docker image by updating phusion/baseimage:0.11 to phusion/baseimage:0.11@sha256:6ba22a31a809de669243b79f982f7b2df733ead1ec45becff401b4d5d79150bb
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_add_url_with_arg:1: pin your Docker image by updating busybox:1.31 to busybox:1.31@sha256:95cf004f559831017cdf4628aaf1bb30133677be8702a8c5f2994629f637a209
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_arg_blank_with_quotes:3
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_arg_blank_with_quotes:8: pin your Docker image by updating busybox:latest to busybox:latest@sha256:a5d0ce49aa801d475da48f8cb163c354ab95cab073cd3c138bd458fc8257fbf1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_arg_from_quotes:3
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_arg_from_single_quotes:3
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_arg_multi:3
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_arg_multi:8: pin your Docker image by updating busybox:latest to busybox:latest@sha256:a5d0ce49aa801d475da48f8cb163c354ab95cab073cd3c138bd458fc8257fbf1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_arg_multi_empty_val:3
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_arg_multi_with_quotes:3
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_arg_multi_with_quotes:8: pin your Docker image by updating busybox:latest to busybox:latest@sha256:a5d0ce49aa801d475da48f8cb163c354ab95cab073cd3c138bd458fc8257fbf1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_arg_secret:1: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_arg_two_level:3
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_cache:19: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_cache_copy:1: pin your Docker image by updating google/cloud-sdk:256.0.0-alpine to google/cloud-sdk:256.0.0-alpine@sha256:46cac9de07e621720947afd83a5d6c4a67fc6de8ce710b89f79b9d3f25e12e06
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_cache_copy_oci:1: pin your Docker image by updating google/cloud-sdk:256.0.0-alpine to google/cloud-sdk:256.0.0-alpine@sha256:46cac9de07e621720947afd83a5d6c4a67fc6de8ce710b89f79b9d3f25e12e06
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_cache_install:19: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_cache_install_oci:19: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_cache_oci:19: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_cache_perm:5: pin your Docker image by updating busybox to busybox@sha256:a5d0ce49aa801d475da48f8cb163c354ab95cab073cd3c138bd458fc8257fbf1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_cache_perm_oci:5: pin your Docker image by updating busybox to busybox@sha256:a5d0ce49aa801d475da48f8cb163c354ab95cab073cd3c138bd458fc8257fbf1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_cmd:1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_cmd:3
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_copy_chown_nonexisting_user:15: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_copy_chown_nonexisting_user:18: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_copy_root_multistage:1: pin your Docker image by updating busybox:1.31 to busybox:1.31@sha256:95cf004f559831017cdf4628aaf1bb30133677be8702a8c5f2994629f637a209
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_copy_symlink:1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_daemons:1: pin your Docker image by updating busybox to busybox@sha256:a5d0ce49aa801d475da48f8cb163c354ab95cab073cd3c138bd458fc8257fbf1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_deleted_file_cached:1: pin your Docker image by updating alpine to alpine@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_env:1: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_expose:1: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_extract_fs:15: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_extraction:2
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_from_multistage_capital:1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_from_multistage_capital:6
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_from_multistage_capital:11
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_hardlink:8
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_issue_1039:1: pin your Docker image by updating registry.access.redhat.com/ubi7/ubi:7.7-214 to registry.access.redhat.com/ubi7/ubi:7.7-214@sha256:e014ab9e4dbe37af806897ce66a439fd82b4496762e005220acebe6362372d86
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_issue_1837:1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_issue_1837:6
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_issue_2049:1: pin your Docker image by updating debian:bullseye-20220328 to debian:bullseye-20220328@sha256:87eefc7c15610cca61db5c0fd280911c6a737c0680d807432c0bd80cd0cca39b
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_issue_2066:1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_issue_2066:8
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_issue_519:1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_issue_519:5
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_issue_519:10
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_issue_647:1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_issue_647:10: pin your Docker image by updating alpine:3.8 to alpine:3.8@sha256:2bb501e6173d9d006e56de5bce2720eb06396803300fe1687b58a7ff32bf4c14
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_issue_704:1: pin your Docker image by updating alpine to alpine@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_label:1: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_meta_arg:7
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_meta_arg:13
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_metadata:1: pin your Docker image by updating debian:10.2 to debian:10.2@sha256:d986a531d62903b66e731d475988f5b2ba3a4a90078078cb0f29f9685ee36466
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_multistage:1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_multistage:8
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_multistage:11
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_multistage:20
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_multistage_args_issue_1911:2
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_multistage_args_issue_1911:6
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_multistage_args_issue_1911:10
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_multistage_args_issue_1911:15
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_onbuild:1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_parent_dir_perms:1: pin your Docker image by updating busybox to busybox@sha256:a5d0ce49aa801d475da48f8cb163c354ab95cab073cd3c138bd458fc8257fbf1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_run:15: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_run_2:18: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_run_new:15: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_run_redo:15: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_scratch:2
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_target:1
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_target:8
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_user:15: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_user_home:15: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_user_nonexisting:15: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_user_run:15: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_volume:1: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_volume_2:1: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_workdir:1: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: integration/dockerfiles/Dockerfile_test_workdir_with_user:1: pin your Docker image by updating debian:10.13 to debian:10.13@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: goCommand not pinned by hash: deploy/Dockerfile:44
Warn: goCommand not pinned by hash: deploy/Dockerfile:47
Warn: goCommand not pinned by hash: deploy/Dockerfile:50
Warn: downloadThenRun not pinned by hash: scripts/k3s-setup.sh:22
Warn: goCommand not pinned by hash: vendor/github.com/agext/levenshtein/test.sh:5
Warn: goCommand not pinned by hash: vendor/github.com/go-git/go-git/v5/oss-fuzz.sh:20
Warn: goCommand not pinned by hash: vendor/google.golang.org/grpc/regenerate.sh:35
Warn: downloadThenRun not pinned by hash: .github/workflows/nightly-vulnerability-scan.yml:19
Info: 5 out of 6 GitHub-owned GitHubAction dependencies pinned
Info: 8 out of 9 third-party GitHubAction dependencies pinned
Info: 25 out of 125 containerImage dependencies pinned
Info: 1 out of 7 goCommand dependencies pinned
Info: 1 out of 1 npmCommand dependencies pinned
Info: 0 out of 2 downloadThenRun dependencies pinned