Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codetests.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/codetests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codetests.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/codetests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codetests.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/codetests.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/codetests.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/codetests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codetests.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/codetests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codetests.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/codetests.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/codetests.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/codetests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codetests.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/codetests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codetests.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/codetests.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/codetests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/codetests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/ghcr.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ghcr.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/ghcr.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ghcr.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/ghcr.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ghcr.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/ghcr.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ghcr.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/ghcr.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ghcr.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/ghcr.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:163: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:214: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/Notifiarr/notifiarr/release.yml/main?enable=pin
Warn: containerImage not pinned by hash: init/docker/Dockerfile.alpine:6
Warn: containerImage not pinned by hash: init/docker/Dockerfile.alpine:37: pin your Docker image by updating alpine to alpine@sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4a
Warn: containerImage not pinned by hash: init/docker/Dockerfile.cuda:6
Warn: containerImage not pinned by hash: init/docker/Dockerfile.cuda:43: pin your Docker image by updating nvidia/cuda:12.6.1-base-ubuntu22.04 to nvidia/cuda:12.6.1-base-ubuntu22.04@sha256:4989b8d89253f415f4273e4d4a1748ad0e82b172a8675ed7bcab3a9f7157cf66
Warn: containerImage not pinned by hash: init/docker/Dockerfile.scratch:6
Info: 0 out of 21 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 11 third-party GitHubAction dependencies pinned
Info: 0 out of 5 containerImage dependencies pinned