Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:376: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:381: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:214: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:257: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:268: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:309: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:342: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:344: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/all.yml:349: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/all.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tc39.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/tc39.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tc39.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/Sonek-HoangBui/k6/tc39.yml/master?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:1
Warn: containerImage not pinned by hash: Dockerfile:7: pin your Docker image by updating alpine:3.13 to alpine:3.13@sha256:469b6e04ee185740477efa44ed5bdd64a07bbdd6c7e5f5d169e540889597b911
Warn: goCommand not pinned by hash: vendor/google.golang.org/grpc/regenerate.sh:30
Warn: goCommand not pinned by hash: vendor/google.golang.org/grpc/vet.sh:38
Warn: goCommand not pinned by hash: vendor/google.golang.org/grpc/vet.sh:48
Warn: downloadThenRun not pinned by hash: .github/workflows/all.yml:126
Warn: goCommand not pinned by hash: .github/workflows/all.yml:165
Warn: goCommand not pinned by hash: .github/workflows/all.yml:166
Warn: goCommand not pinned by hash: .github/workflows/all.yml:170
Info: 0 out of 23 GitHub-owned GitHubAction dependencies pinned
Info: 3 out of 3 third-party GitHubAction dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned
Info: 0 out of 2 containerImage dependencies pinned
Info: 3 out of 9 goCommand dependencies pinned