Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-arm-cpu.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/android-arm-cpu.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/android-arm-cpu.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/android-arm-cpu.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-cpu.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/ios-cpu.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ios-cpu.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/ios-cpu.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux-x86-cpu-gcc.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/linux-x86-cpu-gcc.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux-x86-cpu-gcc.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/linux-x86-cpu-gcc.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/macos-x64-cpu.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/macos-x64-cpu.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/macos-x64-cpu.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/macos-x64-cpu.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-drafter.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release-drafter.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:297: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:309: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:391: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:403: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:441: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:442: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:443: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:451: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:269: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:283: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:359: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:377: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:417: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:427: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:212: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:224: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:325: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:343: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:465: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:470: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:479: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:489: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:499: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:509: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:519: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:529: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:539: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:549: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:559: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:569: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:579: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:589: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:599: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:609: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:253: update your workflow using https://app.stepsecurity.io/secureworkflow/Tencent/TNN/release.yml/master?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating ubuntu:18.04 to ubuntu:18.04@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98
Warn: pipCommand not pinned by hash: Dockerfile:22
Warn: pipCommand not pinned by hash: Dockerfile:22
Warn: pipCommand not pinned by hash: Dockerfile:25
Warn: pipCommand not pinned by hash: test/unit_test/third_party/googletest/ci/install-platformio.sh:2
Warn: downloadThenRun not pinned by hash: third_party/flatbuffers/.travis/format_install.sh:29
Warn: pipCommand not pinned by hash: third_party/flatbuffers/.travis/format_install.sh:85
Warn: pipCommand not pinned by hash: third_party/flatbuffers/conan/travis/install.sh:22
Warn: npmCommand not pinned by hash: third_party/flatbuffers/tests/TypeScriptTest.sh:21
Info: 0 out of 56 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 3 third-party GitHubAction dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned
Info: 0 out of 6 pipCommand dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned
Info: 0 out of 1 npmCommand dependencies pinned