Info: Possibly incomplete results: error parsing shell code: a command can only contain words and redirects; encountered (: deployments/cloudfoundry/bosh/jobs/signalfx-agent/templates/envvars.erb:0
Info: Possibly incomplete results: error parsing shell code: & can only immediately follow a statement: .github/workflows/win_build_and_test.yml:50
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ansible_deployment_test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/ansible_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ansible_deployment_test.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/ansible_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ansible_deployment_test.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/ansible_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ansible_deployment_test.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/ansible_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ansible_deployment_test.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/ansible_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:178: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:206: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:223: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:238: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:254: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:257: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:263: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:268: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:331: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:349: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:351: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:401: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:414: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:432: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:454: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:471: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:488: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:514: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:520: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:545: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_links.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/check_links.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chef_deployment_test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/chef_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chef_deployment_test.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/chef_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chef_deployment_test.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/chef_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chef_deployment_test.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/chef_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chef_deployment_test.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/chef_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chef_deployment_test.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/chef_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chef_deployment_test.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/chef_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chef_deployment_test.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/chef_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs_test.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/docs_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs_test.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/docs_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs_test.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/docs_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-lint.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/go-lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-lint.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/go-lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-lint.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/go-lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-lint.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/go-lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-test-race.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/go-test-race.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-test-race.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/go-test-race.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-test-race.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/go-test-race.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-test-race.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/go-test-race.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gotests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/gotests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gotests.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/gotests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gotests.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/gotests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gotests.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/gotests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installer_test.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/installer_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installer_test.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/installer_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installer_test.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/installer_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installer_test.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/installer_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/modules_and_generate.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/modules_and_generate.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/modules_and_generate.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/modules_and_generate.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/modules_and_generate.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/modules_and_generate.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package_tests.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/package_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package_tests.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/package_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package_tests.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/package_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package_tests.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/package_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package_tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/package_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package_tests.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/package_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package_tests.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/package_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf-tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/perf-tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf-tests.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/perf-tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf-tests.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/perf-tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf-tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/perf-tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf-tests.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/perf-tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/perf-tests.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/perf-tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/puppet_deployment_test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/puppet_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/puppet_deployment_test.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/puppet_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/puppet_deployment_test.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/puppet_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/puppet_deployment_test.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/puppet_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/puppet_deployment_test.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/puppet_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/puppet_deployment_test.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/puppet_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/puppet_deployment_test.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/puppet_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/puppet_deployment_test.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/puppet_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pytest_lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/pytest_lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pytest_lint.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/pytest_lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pytest_lint.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/pytest_lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/python_lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_lint.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/python_lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_lint.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/python_lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/salt_deployment_test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/salt_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/salt_deployment_test.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/salt_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/salt_deployment_test.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/salt_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/salt_deployment_test.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/salt_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/salt_deployment_test.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/salt_deployment_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:180: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:196: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:211: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_build_and_test.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/signalfx/signalfx-agent/win_build_and_test.yml/main?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:5
Warn: containerImage not pinned by hash: Dockerfile:40
Warn: containerImage not pinned by hash: Dockerfile:80
Warn: containerImage not pinned by hash: Dockerfile:260
Warn: containerImage not pinned by hash: Dockerfile:297
Warn: containerImage not pinned by hash: Dockerfile:411
Warn: containerImage not pinned by hash: Dockerfile:423
Warn: containerImage not pinned by hash: Dockerfile:459
Warn: containerImage not pinned by hash: Dockerfile.dev:8: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
Warn: containerImage not pinned by hash: Dockerfile.rhel:1: pin your Docker image by updating registry.access.redhat.com/ubi7/ubi-minimal:latest to registry.access.redhat.com/ubi7/ubi-minimal:latest@sha256:244564fff3841542a17abe5d7daf5c803676dc13af48ea5302218b31ee1c2db7
Warn: containerImage not pinned by hash: Dockerfile.windows:1: pin your Docker image by updating mcr.microsoft.com/windows/servercore:1809 to mcr.microsoft.com/windows/servercore:1809@sha256:0cb5fd75c08e7246afc6cc16bfe769d91af54fdb72ca58df150ebf5e3a2972ad
Warn: containerImage not pinned by hash: deployments/ansible/Dockerfile:1: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
Warn: containerImage not pinned by hash: deployments/chef/Dockerfile:1: pin your Docker image by updating ubuntu:16.04 to ubuntu:16.04@sha256:1f1a2d56de1d604801a9671f301190704c25d604a416f59e03c04f5c6ffee0d6
Warn: containerImage not pinned by hash: deployments/chef/Dockerfile.centos:1: pin your Docker image by updating centos:7 to centos:7@sha256:be65f488b7764ad3638f236b7b515b3678369a5124c47b8d32916d6487418ea4
Warn: containerImage not pinned by hash: deployments/puppet/Dockerfile:1: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
Warn: containerImage not pinned by hash: deployments/salt/Dockerfile:5: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
Warn: containerImage not pinned by hash: deployments/splunk/tracing/Dockerfile:1: pin your Docker image by updating golang:1.18-stretch to golang:1.18-stretch@sha256:a9718cb62e77cc03411ea11fd71f3541e508f211169dd8f8d69ba2036545cd80
Warn: containerImage not pinned by hash: scripts/docs/Dockerfile:1: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
Warn: containerImage not pinned by hash: scripts/docs/check-links/Dockerfile:1: pin your Docker image by updating ghcr.io/tcort/markdown-link-check:3.8.5 to ghcr.io/tcort/markdown-link-check:3.8.5@sha256:d9d7ba587508ccd2d642dceb9d54c38f89404af8681128e1d8fde14505b0be7b
Warn: containerImage not pinned by hash: test-services/activemq/Dockerfile:1: pin your Docker image by updating webcenter/activemq:5.14.3 to webcenter/activemq:5.14.3@sha256:da7b1ee5cf6ac6cbed6c74b5aef08999cb71e6162ee9a100a9a4a10d6bee1f13
Warn: containerImage not pinned by hash: test-services/apache/Dockerfile:1: pin your Docker image by updating httpd:2.4-alpine to httpd:2.4-alpine@sha256:88c55a4fcc1df6cf9e7b38360fb6a6feb4d5c5cf5a27a9ff38096ae585af707f
Warn: containerImage not pinned by hash: test-services/awsapi/Dockerfile:1: pin your Docker image by updating python:3.7 to python:3.7@sha256:eedf63967cdb57d8214db38ce21f105003ed4e4d0358f02bedc057341bcf92a0
Warn: containerImage not pinned by hash: test-services/cassandra/Dockerfile:1: pin your Docker image by updating cassandra:3.11 to cassandra:3.11@sha256:985cc565c118266e8f938793b5d6c427173c7c1d34a2f00eb69b998c8fae09f6
Warn: containerImage not pinned by hash: test-services/couchbase/Dockerfile:2
Warn: containerImage not pinned by hash: test-services/curl/Dockerfile:1: pin your Docker image by updating alpine:3.8 to alpine:3.8@sha256:2bb501e6173d9d006e56de5bce2720eb06396803300fe1687b58a7ff32bf4c14
Warn: containerImage not pinned by hash: test-services/devstack/Dockerfile:1: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
Warn: containerImage not pinned by hash: test-services/dpgen/Dockerfile:1: pin your Docker image by updating node:11 to node:11@sha256:67ca28addce8ae818b144114a9376a6603aba09069b7313618d37b38584abba1
Warn: containerImage not pinned by hash: test-services/ecsmeta/Dockerfile:1: pin your Docker image by updating node:8 to node:8@sha256:a681bf74805b80d03eb21a6c0ef168a976108a287a74167ab593fc953aac34df
Warn: containerImage not pinned by hash: test-services/elasticsearch/2.0.2/Dockerfile:1: pin your Docker image by updating elasticsearch:2.0.2 to elasticsearch:2.0.2@sha256:5f3b87f7ea726f8729ae6ea118bfb136a907af1e7c23179c31a1d9163d51b51e
Warn: containerImage not pinned by hash: test-services/elasticsearch/2.4.5/Dockerfile:1: pin your Docker image by updating elasticsearch:2.4.5 to elasticsearch:2.4.5@sha256:f7f3d09083d8d21ce48fcd49392335e1eb0782f69f619dd4413a698a3318ab90
Warn: containerImage not pinned by hash: test-services/elasticsearch/5.0.0/Dockerfile:1: pin your Docker image by updating docker.elastic.co/elasticsearch/elasticsearch:5.0.0 to docker.elastic.co/elasticsearch/elasticsearch:5.0.0@sha256:07977774e5e1652e5bbe16622e6cc82f6db2c1cf2d664f9ce79dd6e4696ab06f
Warn: containerImage not pinned by hash: test-services/elasticsearch/6.2.0/Dockerfile:1: pin your Docker image by updating docker.elastic.co/elasticsearch/elasticsearch:6.2.0 to docker.elastic.co/elasticsearch/elasticsearch:6.2.0@sha256:f5c50bd5f9d2a7ffe409667f79b0bdc397470032b82bfce7eaf0946dc0d06301
Warn: containerImage not pinned by hash: test-services/elasticsearch/6.4.2/Dockerfile:1: pin your Docker image by updating docker.elastic.co/elasticsearch/elasticsearch:6.4.2 to docker.elastic.co/elasticsearch/elasticsearch:6.4.2@sha256:3da16b2f3b1d4e151c44f1a54f4f29d8be64884a64504b24ebcbdb4e14c80aa1
Warn: containerImage not pinned by hash: test-services/elasticsearch/6.6.1/Dockerfile:1: pin your Docker image by updating docker.elastic.co/elasticsearch/elasticsearch:6.6.1 to docker.elastic.co/elasticsearch/elasticsearch:6.6.1@sha256:b3c3863bfef1bdc79ebb55e61a5f140b397cc6406638b42b7b624ef9742bece3
Warn: containerImage not pinned by hash: test-services/elasticsearch/7.5.1/Dockerfile:1: pin your Docker image by updating docker.elastic.co/elasticsearch/elasticsearch:7.5.1 to docker.elastic.co/elasticsearch/elasticsearch:7.5.1@sha256:b0960105e830085acbb1f9c8001f58626506ce118f33816ea5d38c772bfc7e6c
Warn: containerImage not pinned by hash: test-services/etcd/Dockerfile:1: pin your Docker image by updating quay.io/coreos/etcd:v2.3.8 to quay.io/coreos/etcd:v2.3.8@sha256:1937ab2f06c561b86c0aba25548389a46897ce246b04006f1cee36963fb674ee
Warn: containerImage not pinned by hash: test-services/expvar/Dockerfile:1: pin your Docker image by updating golang:1.18-alpine to golang:1.18-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807
Warn: containerImage not pinned by hash: test-services/fakek8s/Dockerfile:1: pin your Docker image by updating golang:1.18-alpine to golang:1.18-alpine@sha256:77f25981bd57e60a510165f3be89c901aec90453fd0f1c5a45691f6cb1528807
Warn: containerImage not pinned by hash: test-services/hadoop/Dockerfile:1: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
Warn: containerImage not pinned by hash: test-services/haproxy/Dockerfile:2
Warn: containerImage not pinned by hash: test-services/jenkins/Dockerfile:3
Warn: containerImage not pinned by hash: test-services/kafka/Dockerfile:1: pin your Docker image by updating ubuntu:16.04 to ubuntu:16.04@sha256:1f1a2d56de1d604801a9671f301190704c25d604a416f59e03c04f5c6ffee0d6
Warn: containerImage not pinned by hash: test-services/kong/Dockerfile:2
Warn: containerImage not pinned by hash: test-services/minikube/Dockerfile:19: pin your Docker image by updating ubuntu:16.04 to ubuntu:16.04@sha256:1f1a2d56de1d604801a9671f301190704c25d604a416f59e03c04f5c6ffee0d6
Warn: containerImage not pinned by hash: test-services/mongodb/Dockerfile:1: pin your Docker image by updating mongo:3.6 to mongo:3.6@sha256:146c1fd999a660e697aac40bc6da842b005c7868232eb0b7d8996c8f3545b05d
Warn: containerImage not pinned by hash: test-services/nginx/Dockerfile:1: pin your Docker image by updating nginx:1.13.8 to nginx:1.13.8@sha256:0ffc09487404ea43807a1fd9e33d9e924d2c8b48a7b7897e4d1231a396052ff9
Warn: containerImage not pinned by hash: test-services/php/Dockerfile:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8e5c4f0285ecbb4ead070431d29b576a530d3166df73ec44affc1cd27555141b
Warn: containerImage not pinned by hash: test-services/postgres/Dockerfile:2
Warn: containerImage not pinned by hash: test-services/solr/Dockerfile:1: pin your Docker image by updating bitnami/solr:latest to bitnami/solr:latest@sha256:b8ea7fcc5c3e074649b489e5c6d3c8524d76b4f18efe7f752a5fd381f0eccc4b
Warn: containerImage not pinned by hash: test-services/spark/Dockerfile:1: pin your Docker image by updating gettyimages/spark:2.4.1-hadoop-3.0 to gettyimages/spark:2.4.1-hadoop-3.0@sha256:d69628e97705b6f075ec09f1948f20e7565d3f2a9d4588b7ff63b357a2f19385
Warn: containerImage not pinned by hash: test-services/supervisor/Dockerfile:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8e5c4f0285ecbb4ead070431d29b576a530d3166df73ec44affc1cd27555141b
Warn: containerImage not pinned by hash: tests/deployments/ansible/images/Dockerfile.amazonlinux1:1: pin your Docker image by updating amazonlinux:1 to amazonlinux:1@sha256:46cca2cb3297f547bbd4bf739a03aecab458efe85d5a616f30a4e22d9bae382a
Warn: containerImage not pinned by hash: tests/deployments/ansible/images/Dockerfile.amazonlinux2:1: pin your Docker image by updating amazonlinux:2 to amazonlinux:2@sha256:bccc33f13237edc45012bb061400858907dd21dfcfdb0fb803b5b34d333e6d20
Warn: containerImage not pinned by hash: tests/deployments/ansible/images/Dockerfile.centos7:1: pin your Docker image by updating centos:7 to centos:7@sha256:be65f488b7764ad3638f236b7b515b3678369a5124c47b8d32916d6487418ea4
Warn: containerImage not pinned by hash: tests/deployments/ansible/images/Dockerfile.centos8:1: pin your Docker image by updating centos:8 to centos:8@sha256:a27fd8080b517143cbbbab9dfb7c8571c40d67d534bbdee55bd6c473f432b177
Warn: containerImage not pinned by hash: tests/deployments/ansible/images/Dockerfile.debian-10-buster:1: pin your Docker image by updating debian:buster-slim to debian:buster-slim@sha256:bb3dc79fddbca7e8903248ab916bb775c96ec61014b3d02b4f06043b604726dc
Warn: containerImage not pinned by hash: tests/deployments/ansible/images/Dockerfile.debian-11-bullseye:1: pin your Docker image by updating debian:bullseye-slim to debian:bullseye-slim@sha256:b0c91cc181796d34c53f7ea106fbcddaf87f3e601cc371af6a24a019a489c980
Warn: containerImage not pinned by hash: tests/deployments/ansible/images/Dockerfile.debian-9-stretch:1: pin your Docker image by updating debian:stretch-slim to debian:stretch-slim@sha256:abaa313c7e1dfe16069a1a42fa254014780f165d4fd084844602edbe29915e70
Warn: containerImage not pinned by hash: tests/deployments/ansible/images/Dockerfile.ubuntu1604:1: pin your Docker image by updating ubuntu:16.04 to ubuntu:16.04@sha256:1f1a2d56de1d604801a9671f301190704c25d604a416f59e03c04f5c6ffee0d6
Warn: containerImage not pinned by hash: tests/deployments/ansible/images/Dockerfile.ubuntu1804:1: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
Warn: containerImage not pinned by hash: tests/deployments/ansible/images/Dockerfile.ubuntu2004:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8e5c4f0285ecbb4ead070431d29b576a530d3166df73ec44affc1cd27555141b
Warn: containerImage not pinned by hash: tests/deployments/ansible/images/Dockerfile.ubuntu2204:1: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:0e5e4a57c2499249aafc3b40fcd541e9a456aab7296681a3994d631587203f97
Warn: containerImage not pinned by hash: tests/deployments/chef/images/Dockerfile.amazonlinux1:1: pin your Docker image by updating amazonlinux:1 to amazonlinux:1@sha256:46cca2cb3297f547bbd4bf739a03aecab458efe85d5a616f30a4e22d9bae382a
Warn: containerImage not pinned by hash: tests/deployments/chef/images/Dockerfile.amazonlinux2:1: pin your Docker image by updating amazonlinux:2 to amazonlinux:2@sha256:bccc33f13237edc45012bb061400858907dd21dfcfdb0fb803b5b34d333e6d20
Warn: containerImage not pinned by hash: tests/deployments/chef/images/Dockerfile.centos7:4: pin your Docker image by updating centos:7 to centos:7@sha256:be65f488b7764ad3638f236b7b515b3678369a5124c47b8d32916d6487418ea4
Warn: containerImage not pinned by hash: tests/deployments/chef/images/Dockerfile.centos8:4: pin your Docker image by updating centos:8 to centos:8@sha256:a27fd8080b517143cbbbab9dfb7c8571c40d67d534bbdee55bd6c473f432b177
Warn: containerImage not pinned by hash: tests/deployments/chef/images/Dockerfile.debian-10-buster:1: pin your Docker image by updating debian:buster-slim to debian:buster-slim@sha256:bb3dc79fddbca7e8903248ab916bb775c96ec61014b3d02b4f06043b604726dc
Warn: containerImage not pinned by hash: tests/deployments/chef/images/Dockerfile.debian-11-bullseye:1: pin your Docker image by updating debian:bullseye-slim to debian:bullseye-slim@sha256:b0c91cc181796d34c53f7ea106fbcddaf87f3e601cc371af6a24a019a489c980
Warn: containerImage not pinned by hash: tests/deployments/chef/images/Dockerfile.debian-9-stretch:1: pin your Docker image by updating debian:stretch-slim to debian:stretch-slim@sha256:abaa313c7e1dfe16069a1a42fa254014780f165d4fd084844602edbe29915e70
Warn: containerImage not pinned by hash: tests/deployments/chef/images/Dockerfile.opensuse15:1: pin your Docker image by updating opensuse/leap:15 to opensuse/leap:15@sha256:d3a517b66067d9f150dbd57d7ad28e0806025ad6f3a3e8c71b09cc7230b833a6
Warn: containerImage not pinned by hash: tests/deployments/chef/images/Dockerfile.ubuntu1604:1: pin your Docker image by updating ubuntu:16.04 to ubuntu:16.04@sha256:1f1a2d56de1d604801a9671f301190704c25d604a416f59e03c04f5c6ffee0d6
Warn: containerImage not pinned by hash: tests/deployments/chef/images/Dockerfile.ubuntu1804:1: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
Warn: containerImage not pinned by hash: tests/deployments/chef/images/Dockerfile.ubuntu2004:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8e5c4f0285ecbb4ead070431d29b576a530d3166df73ec44affc1cd27555141b
Warn: containerImage not pinned by hash: tests/deployments/chef/images/Dockerfile.ubuntu2204:1: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:0e5e4a57c2499249aafc3b40fcd541e9a456aab7296681a3994d631587203f97
Warn: containerImage not pinned by hash: tests/deployments/helm/Dockerfile:3
Warn: containerImage not pinned by hash: tests/deployments/puppet/images/Dockerfile.amazonlinux1:1: pin your Docker image by updating amazonlinux:1 to amazonlinux:1@sha256:46cca2cb3297f547bbd4bf739a03aecab458efe85d5a616f30a4e22d9bae382a
Warn: containerImage not pinned by hash: tests/deployments/puppet/images/Dockerfile.amazonlinux2:1: pin your Docker image by updating amazonlinux:2 to amazonlinux:2@sha256:bccc33f13237edc45012bb061400858907dd21dfcfdb0fb803b5b34d333e6d20
Warn: containerImage not pinned by hash: tests/deployments/puppet/images/Dockerfile.centos7:1: pin your Docker image by updating centos:7 to centos:7@sha256:be65f488b7764ad3638f236b7b515b3678369a5124c47b8d32916d6487418ea4
Warn: containerImage not pinned by hash: tests/deployments/puppet/images/Dockerfile.centos8:1: pin your Docker image by updating centos:8 to centos:8@sha256:a27fd8080b517143cbbbab9dfb7c8571c40d67d534bbdee55bd6c473f432b177
Warn: containerImage not pinned by hash: tests/deployments/puppet/images/Dockerfile.debian-10-buster:1: pin your Docker image by updating debian:buster-slim to debian:buster-slim@sha256:bb3dc79fddbca7e8903248ab916bb775c96ec61014b3d02b4f06043b604726dc
Warn: containerImage not pinned by hash: tests/deployments/puppet/images/Dockerfile.debian-11-bullseye:1: pin your Docker image by updating debian:bullseye-slim to debian:bullseye-slim@sha256:b0c91cc181796d34c53f7ea106fbcddaf87f3e601cc371af6a24a019a489c980
Warn: containerImage not pinned by hash: tests/deployments/puppet/images/Dockerfile.debian-9-stretch:1: pin your Docker image by updating debian:stretch-slim to debian:stretch-slim@sha256:abaa313c7e1dfe16069a1a42fa254014780f165d4fd084844602edbe29915e70
Warn: containerImage not pinned by hash: tests/deployments/puppet/images/Dockerfile.ubuntu1604:1: pin your Docker image by updating ubuntu:16.04 to ubuntu:16.04@sha256:1f1a2d56de1d604801a9671f301190704c25d604a416f59e03c04f5c6ffee0d6
Warn: containerImage not pinned by hash: tests/deployments/puppet/images/Dockerfile.ubuntu1804:1: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
Warn: containerImage not pinned by hash: tests/deployments/puppet/images/Dockerfile.ubuntu2004:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8e5c4f0285ecbb4ead070431d29b576a530d3166df73ec44affc1cd27555141b
Warn: containerImage not pinned by hash: tests/deployments/puppet/images/Dockerfile.ubuntu2204:1: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:0e5e4a57c2499249aafc3b40fcd541e9a456aab7296681a3994d631587203f97
Warn: containerImage not pinned by hash: tests/deployments/salt/images/Dockerfile.amazonlinux1:1: pin your Docker image by updating amazonlinux:1 to amazonlinux:1@sha256:46cca2cb3297f547bbd4bf739a03aecab458efe85d5a616f30a4e22d9bae382a
Warn: containerImage not pinned by hash: tests/deployments/salt/images/Dockerfile.amazonlinux2:1: pin your Docker image by updating amazonlinux:2 to amazonlinux:2@sha256:bccc33f13237edc45012bb061400858907dd21dfcfdb0fb803b5b34d333e6d20
Warn: containerImage not pinned by hash: tests/deployments/salt/images/Dockerfile.centos7:1: pin your Docker image by updating centos:7 to centos:7@sha256:be65f488b7764ad3638f236b7b515b3678369a5124c47b8d32916d6487418ea4
Warn: containerImage not pinned by hash: tests/deployments/salt/images/Dockerfile.centos8:1: pin your Docker image by updating centos:8 to centos:8@sha256:a27fd8080b517143cbbbab9dfb7c8571c40d67d534bbdee55bd6c473f432b177
Warn: containerImage not pinned by hash: tests/deployments/salt/images/Dockerfile.debian-10-buster:1: pin your Docker image by updating debian:buster-slim to debian:buster-slim@sha256:bb3dc79fddbca7e8903248ab916bb775c96ec61014b3d02b4f06043b604726dc
Warn: containerImage not pinned by hash: tests/deployments/salt/images/Dockerfile.debian-11-bullseye:1: pin your Docker image by updating debian:bullseye-slim to debian:bullseye-slim@sha256:b0c91cc181796d34c53f7ea106fbcddaf87f3e601cc371af6a24a019a489c980
Warn: containerImage not pinned by hash: tests/deployments/salt/images/Dockerfile.debian-9-stretch:1: pin your Docker image by updating debian:stretch-slim to debian:stretch-slim@sha256:abaa313c7e1dfe16069a1a42fa254014780f165d4fd084844602edbe29915e70
Warn: containerImage not pinned by hash: tests/deployments/salt/images/Dockerfile.ubuntu1804:1: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
Warn: containerImage not pinned by hash: tests/deployments/salt/images/Dockerfile.ubuntu2004:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8e5c4f0285ecbb4ead070431d29b576a530d3166df73ec44affc1cd27555141b
Warn: containerImage not pinned by hash: tests/deployments/salt/images/Dockerfile.ubuntu2204:1: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:0e5e4a57c2499249aafc3b40fcd541e9a456aab7296681a3994d631587203f97
Warn: containerImage not pinned by hash: tests/helpers/kubernetes/tunnel/Dockerfile:1: pin your Docker image by updating alpine:3.9 to alpine:3.9@sha256:414e0518bb9228d35e4cd5165567fb91d26c6a214e9c95899e1e056fcd349011
Warn: containerImage not pinned by hash: tests/packaging/images/Dockerfile.alpine:1: pin your Docker image by updating alpine:3.9 to alpine:3.9@sha256:414e0518bb9228d35e4cd5165567fb91d26c6a214e9c95899e1e056fcd349011
Warn: containerImage not pinned by hash: tests/packaging/images/Dockerfile.amazonlinux1:1: pin your Docker image by updating amazonlinux:1 to amazonlinux:1@sha256:46cca2cb3297f547bbd4bf739a03aecab458efe85d5a616f30a4e22d9bae382a
Warn: containerImage not pinned by hash: tests/packaging/images/Dockerfile.amazonlinux2:1: pin your Docker image by updating amazonlinux:2 to amazonlinux:2@sha256:bccc33f13237edc45012bb061400858907dd21dfcfdb0fb803b5b34d333e6d20
Warn: containerImage not pinned by hash: tests/packaging/images/Dockerfile.centos7:4: pin your Docker image by updating centos:7 to centos:7@sha256:be65f488b7764ad3638f236b7b515b3678369a5124c47b8d32916d6487418ea4
Warn: containerImage not pinned by hash: tests/packaging/images/Dockerfile.centos8:4: pin your Docker image by updating centos:8 to centos:8@sha256:a27fd8080b517143cbbbab9dfb7c8571c40d67d534bbdee55bd6c473f432b177
Warn: containerImage not pinned by hash: tests/packaging/images/Dockerfile.debian-10-buster:1: pin your Docker image by updating debian:buster-slim to debian:buster-slim@sha256:bb3dc79fddbca7e8903248ab916bb775c96ec61014b3d02b4f06043b604726dc
Warn: containerImage not pinned by hash: tests/packaging/images/Dockerfile.debian-11-bullseye:1: pin your Docker image by updating debian:bullseye-slim to debian:bullseye-slim@sha256:b0c91cc181796d34c53f7ea106fbcddaf87f3e601cc371af6a24a019a489c980
Warn: containerImage not pinned by hash: tests/packaging/images/Dockerfile.debian-9-stretch:1: pin your Docker image by updating debian:stretch-slim to debian:stretch-slim@sha256:abaa313c7e1dfe16069a1a42fa254014780f165d4fd084844602edbe29915e70
Warn: containerImage not pinned by hash: tests/packaging/images/Dockerfile.opensuse15:1: pin your Docker image by updating opensuse/leap:15 to opensuse/leap:15@sha256:d3a517b66067d9f150dbd57d7ad28e0806025ad6f3a3e8c71b09cc7230b833a6
Warn: containerImage not pinned by hash: tests/packaging/images/Dockerfile.ubuntu1604:1: pin your Docker image by updating ubuntu:16.04 to ubuntu:16.04@sha256:1f1a2d56de1d604801a9671f301190704c25d604a416f59e03c04f5c6ffee0d6
Warn: containerImage not pinned by hash: tests/packaging/images/Dockerfile.ubuntu1804:1: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
Warn: containerImage not pinned by hash: tests/packaging/images/Dockerfile.ubuntu2004:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8e5c4f0285ecbb4ead070431d29b576a530d3166df73ec44affc1cd27555141b
Warn: containerImage not pinned by hash: tests/packaging/images/Dockerfile.ubuntu2204:1: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:0e5e4a57c2499249aafc3b40fcd541e9a456aab7296681a3994d631587203f97
Warn: pipCommand not pinned by hash: Dockerfile:264-266
Warn: pipCommand not pinned by hash: Dockerfile:264-266
Warn: pipCommand not pinned by hash: Dockerfile:273
Warn: pipCommand not pinned by hash: Dockerfile:275
Warn: pipCommand not pinned by hash: Dockerfile:281
Warn: pipCommand not pinned by hash: Dockerfile.dev:71
Warn: pipCommand not pinned by hash: Dockerfile.dev:73
Warn: goCommand not pinned by hash: Dockerfile.dev:85
Warn: goCommand not pinned by hash: Dockerfile.dev:86
Warn: goCommand not pinned by hash: Dockerfile.dev:87
Warn: downloadThenRun not pinned by hash: Dockerfile.dev:88
Warn: pipCommand not pinned by hash: deployments/ansible/Dockerfile:10
Warn: pipCommand not pinned by hash: deployments/ansible/Dockerfile:11
Warn: pipCommand not pinned by hash: deployments/salt/Dockerfile:11
Warn: pipCommand not pinned by hash: deployments/salt/Dockerfile:18
Warn: pipCommand not pinned by hash: scripts/docs/Dockerfile:15
Warn: pipCommand not pinned by hash: test-services/awsapi/Dockerfile:8
Warn: npmCommand not pinned by hash: test-services/ecsmeta/Dockerfile:4
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.amazonlinux1:11
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.amazonlinux2:6
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.amazonlinux2:9
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.centos7:8
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.centos7:11
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.centos8:9
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.centos8:12
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.debian-10-buster:8
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.debian-10-buster:11
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.debian-11-bullseye:8
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.debian-11-bullseye:11
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.debian-9-stretch:12
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.debian-9-stretch:15
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.ubuntu1604:10
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.ubuntu1804:8
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.ubuntu1804:11
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.ubuntu2004:9
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.ubuntu2004:12
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.ubuntu2204:8
Warn: pipCommand not pinned by hash: tests/deployments/ansible/images/Dockerfile.ubuntu2204:11
Warn: downloadThenRun not pinned by hash: tests/deployments/chef/images/Dockerfile.amazonlinux1:10
Warn: downloadThenRun not pinned by hash: tests/deployments/chef/images/Dockerfile.amazonlinux2:12
Warn: downloadThenRun not pinned by hash: tests/deployments/chef/images/Dockerfile.centos7:13
Warn: downloadThenRun not pinned by hash: tests/deployments/chef/images/Dockerfile.centos8:18
Warn: downloadThenRun not pinned by hash: tests/deployments/chef/images/Dockerfile.debian-10-buster:13
Warn: downloadThenRun not pinned by hash: tests/deployments/chef/images/Dockerfile.debian-11-bullseye:13
Warn: downloadThenRun not pinned by hash: tests/deployments/chef/images/Dockerfile.debian-9-stretch:16
Warn: downloadThenRun not pinned by hash: tests/deployments/chef/images/Dockerfile.opensuse15:8-9
Warn: downloadThenRun not pinned by hash: tests/deployments/chef/images/Dockerfile.ubuntu1604:13
Warn: downloadThenRun not pinned by hash: tests/deployments/chef/images/Dockerfile.ubuntu1804:13
Warn: downloadThenRun not pinned by hash: tests/deployments/chef/images/Dockerfile.ubuntu2004:13
Warn: downloadThenRun not pinned by hash: tests/deployments/chef/images/Dockerfile.ubuntu2204:13
Warn: pipCommand not pinned by hash: tests/deployments/salt/images/Dockerfile.amazonlinux2:7
Warn: pipCommand not pinned by hash: tests/deployments/salt/images/Dockerfile.amazonlinux2:8
Warn: pipCommand not pinned by hash: tests/deployments/salt/images/Dockerfile.centos7:7
Warn: pipCommand not pinned by hash: tests/deployments/salt/images/Dockerfile.centos7:8
Warn: pipCommand not pinned by hash: tests/deployments/salt/images/Dockerfile.centos8:10
Warn: pipCommand not pinned by hash: tests/deployments/salt/images/Dockerfile.debian-10-buster:7
Warn: pipCommand not pinned by hash: tests/deployments/salt/images/Dockerfile.debian-11-bullseye:7
Warn: pipCommand not pinned by hash: tests/deployments/salt/images/Dockerfile.debian-9-stretch:11
Warn: pipCommand not pinned by hash: tests/deployments/salt/images/Dockerfile.debian-9-stretch:12
Warn: pipCommand not pinned by hash: tests/deployments/salt/images/Dockerfile.ubuntu1804:7
Warn: pipCommand not pinned by hash: tests/deployments/salt/images/Dockerfile.ubuntu1804:8
Warn: pipCommand not pinned by hash: tests/deployments/salt/images/Dockerfile.ubuntu2004:7
Warn: pipCommand not pinned by hash: tests/deployments/salt/images/Dockerfile.ubuntu2204:7
Warn: pipCommand not pinned by hash: .github/workflows/ansible_deployment_test.yml:62
Warn: pipCommand not pinned by hash: .github/workflows/build_and_test.yml:123
Warn: pipCommand not pinned by hash: .github/workflows/build_and_test.yml:276
Warn: pipCommand not pinned by hash: .github/workflows/build_and_test.yml:529
Warn: pipCommand not pinned by hash: .github/workflows/chef_deployment_test.yml:62
Warn: pipCommand not pinned by hash: .github/workflows/chef_deployment_test.yml:99
Warn: goCommand not pinned by hash: .github/workflows/go-test-race.yml:52
Warn: goCommand not pinned by hash: .github/workflows/gotests.yml:53
Warn: pipCommand not pinned by hash: .github/workflows/installer_test.yml:48
Warn: pipCommand not pinned by hash: .github/workflows/package_tests.yml:86
Warn: pipCommand not pinned by hash: .github/workflows/perf-tests.yml:70
Warn: pipCommand not pinned by hash: .github/workflows/puppet_deployment_test.yml:62
Warn: pipCommand not pinned by hash: .github/workflows/puppet_deployment_test.yml:99
Warn: pipCommand not pinned by hash: .github/workflows/pytest_lint.yml:42
Warn: pipCommand not pinned by hash: .github/workflows/python_lint.yml:42
Warn: pipCommand not pinned by hash: .github/workflows/python_lint.yml:43
Warn: pipCommand not pinned by hash: .github/workflows/salt_deployment_test.yml:62
Warn: goCommand not pinned by hash: .github/workflows/win_build_and_test.yml:47
Warn: pipCommand not pinned by hash: .github/workflows/win_build_and_test.yml:165
Warn: chocoCommand not pinned by hash: .github/workflows/win_build_and_test.yml:168
Warn: pipCommand not pinned by hash: .github/workflows/win_build_and_test.yml:219
Info: 0 out of 122 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 7 third-party GitHubAction dependencies pinned
Info: 0 out of 110 containerImage dependencies pinned
Info: 0 out of 63 pipCommand dependencies pinned
Info: 0 out of 6 goCommand dependencies pinned
Info: 0 out of 13 downloadThenRun dependencies pinned
Info: 0 out of 1 npmCommand dependencies pinned
Info: 0 out of 1 chocoCommand dependencies pinned