Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-infra-dockers.yaml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-infra-dockers.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-infra-dockers.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-infra-dockers.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-infra-dockers.yaml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-infra-dockers.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-infra-dockers.yaml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-infra-dockers.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-infra-dockers.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-infra-dockers.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-infra-dockers.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-infra-dockers.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:229: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:243: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:268: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:286: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:288: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:295: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:325: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:478: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:480: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:485: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:526: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:592: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:594: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:600: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:602: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:633: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:642: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:651: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:673: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:675: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:680: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:688: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:690: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:711: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:884: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:887: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:899: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:912: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:922: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:966: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:968: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:973: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:975: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:1001: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:1008: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:1034: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:1061: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:1063: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:1079: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:1081: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:1101: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:1102: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:1110: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:350: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:352: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:357: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:431: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:445: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:544: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:546: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:567: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:784: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:790: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:796: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:801: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:807: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:820: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:1122: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:1123: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:729: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:735: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:740: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-syncthing.yaml:753: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/build-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-metadata.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/pr-metadata.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-syncthing.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/release-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-syncthing.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/release-syncthing.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-syncthing.yaml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/release-syncthing.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/trigger-nightly.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/trigger-nightly.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-docs-translations.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/update-docs-translations.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-docs-translations.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/syncthing/syncthing/update-docs-translations.yaml/main?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:10
Warn: containerImage not pinned by hash: Dockerfile:29: pin your Docker image by updating alpine to alpine@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715
Warn: containerImage not pinned by hash: Dockerfile.builder:2
Warn: containerImage not pinned by hash: Dockerfile.stcrashreceiver:1: pin your Docker image by updating alpine to alpine@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715
Warn: containerImage not pinned by hash: Dockerfile.stdiscosrv:2
Warn: containerImage not pinned by hash: Dockerfile.stdiscosrv:16: pin your Docker image by updating alpine to alpine@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715
Warn: containerImage not pinned by hash: Dockerfile.strelaypoolsrv:1: pin your Docker image by updating alpine to alpine@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715
Warn: containerImage not pinned by hash: Dockerfile.strelaysrv:2
Warn: containerImage not pinned by hash: Dockerfile.strelaysrv:16: pin your Docker image by updating alpine to alpine@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715
Warn: containerImage not pinned by hash: Dockerfile.stupgrades:1: pin your Docker image by updating alpine to alpine@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715
Warn: containerImage not pinned by hash: Dockerfile.ursrv:1: pin your Docker image by updating alpine to alpine@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715
Warn: goCommand not pinned by hash: .github/workflows/build-syncthing.yaml:125
Warn: goCommand not pinned by hash: .github/workflows/build-syncthing.yaml:1089
Info: 0 out of 62 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 25 third-party GitHubAction dependencies pinned
Info: 2 out of 4 goCommand dependencies pinned
Info: 0 out of 11 containerImage dependencies pinned