Warn: third-party GitHubAction not pinned by hash: .github/workflows/branchtest.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/branchtest.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/branchtest.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/branchtest.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/deletedroplets.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/deletedroplets.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/deletedroplets.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/deletedroplets.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/deletedroplets.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/deletedroplets.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/deletedroplets.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/deletedroplets.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/deletedroplets.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/deletedroplets.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/deletedroplets.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/deletedroplets.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/deletedroplets.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/deletedroplets.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-builder.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/docker-builder.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-builder.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/docker-builder.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-builder.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/docker-builder.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-builder.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/docker-builder.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/docs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/docs.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/docs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docker.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/publish-docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-docker.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/publish-docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-docker.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/publish-docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-docker.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/publish-docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-docker.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/publish-docker.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-docker.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/publish-docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-docker.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/publish-docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-docker.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/publish-docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-docker.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/publish-docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-docker.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/publish-docker.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/gravitl/netmaker/test.yml/master?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:2
Warn: containerImage not pinned by hash: Dockerfile:9: pin your Docker image by updating alpine:3.21.0 to alpine:3.21.0@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
Warn: containerImage not pinned by hash: Dockerfile-quick:2: pin your Docker image by updating alpine:3.21.0 to alpine:3.21.0@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
Warn: containerImage not pinned by hash: docker/Dockerfile-go-builder:1: pin your Docker image by updating golang:1.23.0-alpine3.20 to golang:1.23.0-alpine3.20@sha256:d0b31558e6b3e4cc59f6011d79905835108c919143ebecc58f35965bf79948f4
Warn: containerImage not pinned by hash: docker/Dockerfile-netclient-doks:1
Warn: containerImage not pinned by hash: docker/Dockerfile-netclient-doks:30: pin your Docker image by updating debian:buster to debian:buster@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: docker/Dockerfile-netclient-doks-uspace:1
Warn: containerImage not pinned by hash: docker/Dockerfile-netclient-doks-uspace:45: pin your Docker image by updating debian:buster to debian:buster@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225
Warn: containerImage not pinned by hash: docker/Dockerfile-netclient-multiarch:1
Warn: containerImage not pinned by hash: docker/Dockerfile-netclient-multiarch:12: pin your Docker image by updating alpine:3.16.2 to alpine:3.16.2@sha256:65a2763f593ae85fab3b5406dc9e80f744ec5b449f269b699b5efd37a07ad32e
Warn: containerImage not pinned by hash: docker/Dockerfile-netclient-multiarch-userspace:1
Warn: containerImage not pinned by hash: docker/Dockerfile-netclient-multiarch-userspace:27: pin your Docker image by updating alpine:3.16.2 to alpine:3.16.2@sha256:65a2763f593ae85fab3b5406dc9e80f744ec5b449f269b699b5efd37a07ad32e
Warn: downloadThenRun not pinned by hash: scripts/nm-upgrade-0-17-1-to-0-19-0.sh:574
Warn: downloadThenRun not pinned by hash: scripts/nm-upgrade-0-17-1-to-0-19-0.sh:592
Warn: downloadThenRun not pinned by hash: scripts/nm-upgrade-0-17-1-to-0-19-0.sh:593
Warn: downloadThenRun not pinned by hash: scripts/nm-upgrade-0-17-1-to-0-19-0.sh:594
Warn: downloadThenRun not pinned by hash: scripts/nm-upgrade-0-17-1-to-0-19-0.sh:651
Warn: downloadThenRun not pinned by hash: scripts/nm-upgrade-0-17-1-to-0-19-0.sh:659
Warn: downloadThenRun not pinned by hash: scripts/nm-upgrade-0-17-1-to-0-19-0.sh:676
Warn: downloadThenRun not pinned by hash: scripts/nm-upgrade-0-17-1-to-0-19-0.sh:684
Warn: downloadThenRun not pinned by hash: scripts/nm-upgrade-0-17-1-to-0-19-0.sh:693
Warn: downloadThenRun not pinned by hash: scripts/nm-upgrade-0-17-1-to-0-19-0.sh:697
Warn: goCommand not pinned by hash: .github/workflows/docs.yml:28
Warn: goCommand not pinned by hash: .github/workflows/test.yml:73
Info: 0 out of 14 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 20 third-party GitHubAction dependencies pinned
Info: 0 out of 12 containerImage dependencies pinned
Info: 0 out of 10 downloadThenRun dependencies pinned
Info: 0 out of 2 goCommand dependencies pinned