Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cloud-deploy.yaml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/cloud-deploy.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cloud-deploy.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/cloud-deploy.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cloud-deploy.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/cloud-deploy.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cloud-deploy.yaml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/cloud-deploy.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/e2e.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/kind-deploy.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/kind-deploy.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/kind-deploy.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/kind-deploy.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/kind-deploy.yaml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/kind-deploy.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/kind-deploy.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/kind-deploy.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linter.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/linter.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/linter.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/linter.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/pr.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/pr.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/pr.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/proto.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/proto.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/proto.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/proto.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/proto.yaml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/proto.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/proto.yaml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/proto.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/proto.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/proto.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/proto.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/proto.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/push.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/push.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/push.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/xmlking/toolkit/release.yaml/main?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:4
Warn: containerImage not pinned by hash: Dockerfile:5
Warn: downloadThenRun not pinned by hash: .github/workflows/pr.yml:38
Warn: downloadThenRun not pinned by hash: .github/workflows/push.yml:40
Info: 0 out of 14 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 13 third-party GitHubAction dependencies pinned
Info: 0 out of 2 containerImage dependencies pinned
Info: 0 out of 2 downloadThenRun dependencies pinned