Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/NVIDIA/mig-parted/build.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/NVIDIA/mig-parted/build.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/NVIDIA/mig-parted/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/NVIDIA/mig-parted/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/golang.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/NVIDIA/mig-parted/golang.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/golang.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/NVIDIA/mig-parted/golang.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/golang.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/NVIDIA/mig-parted/golang.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/golang.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/NVIDIA/mig-parted/golang.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/golang.yaml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/NVIDIA/mig-parted/golang.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/golang.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/NVIDIA/mig-parted/golang.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/golang.yaml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/NVIDIA/mig-parted/golang.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/image.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/NVIDIA/mig-parted/image.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/image.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/NVIDIA/mig-parted/image.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/image.yaml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/NVIDIA/mig-parted/image.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/image.yaml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/NVIDIA/mig-parted/image.yaml/main?enable=pin
Warn: containerImage not pinned by hash: deployments/container/Dockerfile.ubi9:15
Warn: containerImage not pinned by hash: deployments/container/Dockerfile.ubi9:61: pin your Docker image by updating nvcr.io/nvidia/cuda:12.8.0-base-ubi9 to nvcr.io/nvidia/cuda:12.8.0-base-ubi9@sha256:b24e555dce8b3e4a3b50152cc10ec6739691839a04f893de1428045c032db940
Warn: containerImage not pinned by hash: deployments/container/Dockerfile.ubuntu:15
Warn: containerImage not pinned by hash: deployments/container/Dockerfile.ubuntu:61: pin your Docker image by updating nvcr.io/nvidia/cuda:12.8.0-base-ubuntu20.04 to nvcr.io/nvidia/cuda:12.8.0-base-ubuntu20.04@sha256:526883cc74d87924bc822e8be2597ab1ef4596e0c1fc3c9cf8de1a3713efecb0
Warn: containerImage not pinned by hash: deployments/devel/Dockerfile:17: pin your Docker image by updating golang:1.23.5 to golang:1.23.5@sha256:e213430692e5c31aba27473cdc84cfff2896d0c097e984bef67b6a44c75a8181
Warn: containerImage not pinned by hash: deployments/systemd/packages/Dockerfile.deb:18
Warn: containerImage not pinned by hash: deployments/systemd/packages/Dockerfile.deb:57
Warn: containerImage not pinned by hash: deployments/systemd/packages/Dockerfile.rpm:18
Warn: containerImage not pinned by hash: deployments/systemd/packages/Dockerfile.rpm:58
Warn: containerImage not pinned by hash: deployments/systemd/packages/Dockerfile.tarball:18
Warn: containerImage not pinned by hash: deployments/systemd/packages/Dockerfile.tarball:57
Warn: goCommand not pinned by hash: vendor/github.com/json-iterator/go/build.sh:10
Info: 0 out of 9 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 6 third-party GitHubAction dependencies pinned
Info: 0 out of 11 containerImage dependencies pinned
Info: 2 out of 3 goCommand dependencies pinned