Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/buf.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/buf.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/buf.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/buf.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/buf.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/buf.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/docker.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ensure-docs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/ensure-docs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ensure-docs.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/ensure-docs.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ensure-docs.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/ensure-docs.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-drafter.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release-drafter.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/review.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/review.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/review.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/review.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/review.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/review.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/review.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/review.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/powergate/test.yml/master?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:3
Warn: containerImage not pinned by hash: Dockerfile:16: pin your Docker image by updating alpine to alpine@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
Warn: npmCommand not pinned by hash: scripts/gen-js-protos.sh:22
Warn: npmCommand not pinned by hash: scripts/gen-js-protos.sh:23
Warn: pipCommand not pinned by hash: scripts/gen-py-protos.sh:36
Warn: pipCommand not pinned by hash: scripts/gen-py-protos.sh:41
Warn: pipCommand not pinned by hash: .github/workflows/release.yml:134
Info: 0 out of 17 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 15 third-party GitHubAction dependencies pinned
Info: 0 out of 2 containerImage dependencies pinned
Info: 0 out of 2 npmCommand dependencies pinned
Info: 0 out of 3 pipCommand dependencies pinned
Info: 1 out of 1 goCommand dependencies pinned