Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_docs.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/build_docs.yml/trunk?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_docs.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/build_docs.yml/trunk?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/codeql.yml/trunk?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/codeql.yml/trunk?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/codeql.yml/trunk?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/go.yml/trunk?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/go.yml/trunk?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/go.yml/trunk?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/go.yml/trunk?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/lint.yml/trunk?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/lint.yml/trunk?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/lint.yml/trunk?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/release.yml/trunk?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/release.yml/trunk?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/release.yml/trunk?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/release.yml/trunk?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/release.yml/trunk?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/release.yml/trunk?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/release.yml/trunk?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/release.yml/trunk?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/release.yml/trunk?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/release.yml/trunk?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/release.yml/trunk?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/release.yml/trunk?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/profclems/glab/stale.yml/trunk?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating alpine:latest to alpine:latest@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715
Warn: downloadThenRun not pinned by hash: .github/workflows/go.yml:61
Info: 0 out of 16 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 9 third-party GitHubAction dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned
Info: 1 out of 1 goCommand dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned