Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bench-examples.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/bench-examples.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bench-examples.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/bench-examples.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bench-examples.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/bench-examples.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bench-examples.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/bench-examples.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bench-examples.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/bench-examples.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bench-examples.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/bench-examples.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/bench-examples.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/bench-examples.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bench.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/bench.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bench.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/bench.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bench.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/bench.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bench.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/bench.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bench.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/bench.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/bench.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/bench.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cloc.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/cloc.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cloc.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/cloc.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cloc.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/cloc.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/golangci-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/golangci-lint.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/golangci-lint.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/golangci-lint.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/golangci-lint.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/golangci-lint.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gorelease.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/gorelease.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gorelease.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/gorelease.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gorelease.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/gorelease.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/gorelease.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/gorelease.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-examples.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/test-examples.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-examples.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/test-examples.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-examples.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/test-examples.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-unit.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/test-unit.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-unit.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/test-unit.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-unit.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/test-unit.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-unit.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/test-unit.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-unit.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/test-unit.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-unit.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/swaggest/rest/test-unit.yml/master?enable=pin
Warn: goCommand not pinned by hash: .github/workflows/gorelease.yml:42
Info: 0 out of 25 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 7 third-party GitHubAction dependencies pinned
Info: 0 out of 1 goCommand dependencies pinned