Info: Possibly incomplete results: error parsing shell code: "foo(" must be followed by ): vendor/sigs.k8s.io/controller-runtime/Makefile:0
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-image-scanning-on-schedule.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-image-scanning-on-schedule.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-image-scanning-on-schedule.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-image-scanning-on-schedule.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-image-scanning-on-schedule.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-image-scanning-on-schedule.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-image-scanning-on-schedule.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-image-scanning-on-schedule.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-image-scanning-on-schedule.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-image-scanning-on-schedule.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-image-scanning.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-image-scanning.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-image-scanning.yaml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-image-scanning.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-image-scanning.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-image-scanning.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-image-scanning.yaml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-image-scanning.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-image-scanning.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-image-scanning.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-schedule-compatibility.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-schedule-compatibility.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-schedule-compatibility.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-schedule-compatibility.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-schedule-compatibility.yaml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-schedule-compatibility.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-schedule-compatibility.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-schedule-compatibility.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-schedule-compatibility.yaml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-schedule-compatibility.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-schedule-compatibility.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-schedule-compatibility.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-schedule.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-schedule.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-schedule.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-schedule.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-schedule.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-schedule.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-schedule.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-schedule.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-schedule.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-schedule.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-schedule.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci-schedule.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dockerhub-latest-chart.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-latest-chart.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dockerhub-latest-chart.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-latest-chart.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/dockerhub-latest-chart.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-latest-chart.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dockerhub-latest-image.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-latest-image.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dockerhub-latest-image.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-latest-image.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/dockerhub-latest-image.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-latest-image.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/dockerhub-latest-image.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-latest-image.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/dockerhub-latest-image.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-latest-image.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/dockerhub-latest-image.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-latest-image.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dockerhub-released-chart.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-released-chart.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dockerhub-released-chart.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-released-chart.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/dockerhub-released-chart.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-released-chart.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dockerhub-released-image.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-released-image.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dockerhub-released-image.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-released-image.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/dockerhub-released-image.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-released-image.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/dockerhub-released-image.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-released-image.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/dockerhub-released-image.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-released-image.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/dockerhub-released-image.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/dockerhub-released-image.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fossa.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/fossa.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/fossa.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/fossa.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installation-chart.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-chart.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installation-chart.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-chart.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/installation-chart.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-chart.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/installation-chart.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-chart.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installation-chart.yaml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-chart.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/installation-chart.yaml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-chart.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installation-cli.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-cli.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installation-cli.yaml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-cli.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installation-cli.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-cli.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installation-cli.yaml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-cli.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installation-cli.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-cli.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installation-cli.yaml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-cli.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/installation-operator.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-operator.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installation-operator.yaml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-operator.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installation-operator.yaml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-operator.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installation-operator.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-operator.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installation-operator.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/installation-operator.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:223: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swr-latest-image.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/swr-latest-image.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swr-latest-image.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/swr-latest-image.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swr-released-image.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/swr-released-image.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swr-released-image.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/karmada-io/karmada/swr-released-image.yml/master?enable=pin
Warn: containerImage not pinned by hash: cluster/images/Dockerfile:15: pin your Docker image by updating alpine:3.21.2 to alpine:3.21.2@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
Warn: containerImage not pinned by hash: cluster/images/buildx.Dockerfile:15: pin your Docker image by updating alpine:3.21.2 to alpine:3.21.2@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
Warn: goCommand not pinned by hash: hack/run-e2e.sh:45
Warn: downloadThenRun not pinned by hash: hack/scan-image-vuln.sh:81
Warn: goCommand not pinned by hash: hack/setup-dev-base.sh:126
Warn: goCommand not pinned by hash: hack/update-codegen.sh:25
Warn: goCommand not pinned by hash: hack/update-codegen.sh:26
Warn: goCommand not pinned by hash: hack/update-codegen.sh:27
Warn: goCommand not pinned by hash: hack/update-codegen.sh:28
Warn: goCommand not pinned by hash: hack/update-codegen.sh:29
Warn: goCommand not pinned by hash: hack/update-codegen.sh:30
Warn: goCommand not pinned by hash: hack/update-codegen.sh:31
Warn: goCommand not pinned by hash: hack/update-estimator-protobuf.sh:27
Warn: goCommand not pinned by hash: hack/update-estimator-protobuf.sh:28
Warn: goCommand not pinned by hash: hack/update-estimator-protobuf.sh:29
Warn: goCommand not pinned by hash: hack/update-estimator-protobuf.sh:30
Warn: goCommand not pinned by hash: hack/update-import-aliases.sh:25
Warn: goCommand not pinned by hash: hack/update-mocks.sh:36
Warn: goCommand not pinned by hash: hack/update-mocks.sh:41
Warn: downloadThenRun not pinned by hash: hack/util.sh:202
Warn: downloadThenRun not pinned by hash: hack/verify-staticcheck.sh:33
Warn: goCommand not pinned by hash: vendor/github.com/json-iterator/go/build.sh:10
Warn: goCommand not pinned by hash: vendor/github.com/pelletier/go-toml/benchmark.sh:10
Warn: goCommand not pinned by hash: vendor/google.golang.org/grpc/regenerate.sh:35
Warn: goCommand not pinned by hash: .github/workflows/installation-cli.yaml:48
Warn: goCommand not pinned by hash: .github/workflows/installation-cli.yaml:91
Warn: goCommand not pinned by hash: .github/workflows/installation-operator.yaml:61
Info: 0 out of 60 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 33 third-party GitHubAction dependencies pinned
Info: 0 out of 2 containerImage dependencies pinned
Info: 2 out of 24 goCommand dependencies pinned
Info: 0 out of 3 downloadThenRun dependencies pinned