Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/firebase-hosting-merge.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/firebase-hosting-merge.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/firebase-hosting-merge.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/firebase-hosting-merge.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/firebase-hosting-merge.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/firebase-hosting-merge.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/firebase-hosting-pull-request.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/firebase-hosting-pull-request.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/firebase-hosting-pull-request.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/firebase-hosting-pull-request.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/firebase-hosting-pull-request.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/firebase-hosting-pull-request.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/golangci-lint.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/golangci-lint.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/golangci-lint.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/golangci-lint.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/golangci-lint.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/golangci-lint.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/goreleaser-release.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/goreleaser-release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/goreleaser-release.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/goreleaser-release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/goreleaser-release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/goreleaser-release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/goreleaser-release.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/goreleaser-release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/goreleaser-release.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/goreleaser-release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/goreleaser-release.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/goreleaser-release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/goreleaser-release.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/goreleaser-release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/goreleaser-snapshot.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/goreleaser-snapshot.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/goreleaser-snapshot.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/goreleaser-snapshot.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/goreleaser-snapshot.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/goreleaser-snapshot.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/goreleaser-snapshot.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/goreleaser-snapshot.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/goreleaser-snapshot.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/goreleaser-snapshot.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/goreleaser-snapshot.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/goreleaser-snapshot.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unittest.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/unittest.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unittest.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/unittest.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unittest.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/unittest.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/unittest.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/jaimeteb/chatto/unittest.yml/master?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating alpine to alpine@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715
Warn: containerImage not pinned by hash: utils/docker-test/Dockerfile:1: pin your Docker image by updating golang:1.15-alpine to golang:1.15-alpine@sha256:b58c367d52e46cdedc25ec9cd74cadb14ad65e8db75b25e5ec117cdb227aa264
Warn: pipCommand not pinned by hash: .github/workflows/firebase-hosting-merge.yml:29
Warn: pipCommand not pinned by hash: .github/workflows/firebase-hosting-pull-request.yml:27
Info: 0 out of 15 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 11 third-party GitHubAction dependencies pinned
Info: 0 out of 2 pipCommand dependencies pinned
Info: 0 out of 2 containerImage dependencies pinned