Warn: third-party GitHubAction not pinned by hash: .github/workflows/assign.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/assign.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkgbuild.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/pkgbuild.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pkgbuild.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/pkgbuild.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pkgbuild.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/pkgbuild.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkgbuild.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/pkgbuild.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/review.yml:7: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/review.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/review.yml:8: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/review.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/kyoh86/my-nerds/test.yml/main?enable=pin
Warn: containerImage not pinned by hash: .github/actions/pkgbuild/Dockerfile:1: pin your Docker image by updating archlinux:latest to archlinux:latest@sha256:fcc0e315ba72175e77f5c351f1a79ff05fe5548431e842924b7b7cddb8240c08
Info: 0 out of 17 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 12 third-party GitHubAction dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned
