Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/api-swagger-ui.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/api-swagger-ui.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/api-swagger-ui.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/api-swagger-ui.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/api-swagger-ui.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/api-swagger-ui.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:310: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:255: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:266: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:288: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/ci.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dockerhub.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/dockerhub.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/dockerhub.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/dockerhub.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dockerhub.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/dockerhub.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/dockerhub.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/dockerhub.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/release.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/release.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:192: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/release.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:196: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/release.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:221: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/release.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/release.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/release.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/release.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/release.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/release.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/release.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/release.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/systest.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/systest.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/systest.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/systest.yml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yml:190: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yml:203: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yml:214: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yml:219: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yml:231: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/systest.yml:239: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/systest.yml:274: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yml:279: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yml:287: update your workflow using https://app.stepsecurity.io/secureworkflow/spacemeshos/go-spacemesh/systest.yml/develop?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:2
Warn: containerImage not pinned by hash: Dockerfile:29
Warn: containerImage not pinned by hash: Dockerfile:58
Warn: containerImage not pinned by hash: bootstrap.Dockerfile:1
Warn: containerImage not pinned by hash: bootstrap.Dockerfile:18: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:0e5e4a57c2499249aafc3b40fcd541e9a456aab7296681a3994d631587203f97
Warn: containerImage not pinned by hash: systest/Dockerfile:1
Warn: containerImage not pinned by hash: systest/Dockerfile:31
Info: 0 out of 26 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 36 third-party GitHubAction dependencies pinned
Info: 0 out of 7 containerImage dependencies pinned
Info: 1 out of 1 goCommand dependencies pinned