Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/yousong/onecloud/docker.yml/master?enable=pin
Warn: containerImage not pinned by hash: build/docker/Dockerfile.ansibleserver:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/ansibleserver-base:latest to registry.cn-beijing.aliyuncs.com/yunionio/ansibleserver-base:latest@sha256:b608efbbbbd40073c920c3d2bbae8d06a1ba281692235fa49c8dffa85cd70130
Warn: containerImage not pinned by hash: build/docker/Dockerfile.ansibleserver-base:1: pin your Docker image by updating frolvlad/alpine-glibc:glibc-2.28 to frolvlad/alpine-glibc:glibc-2.28@sha256:f9c59f26bac90e623884250484b2892c2f79c022c908bb187b36bec376047ed6
Warn: containerImage not pinned by hash: build/docker/Dockerfile.apigateway:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest to registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest@sha256:355d51b81ea018f5272935f9a17cb36abd998f21194691148d2d88e97577e07c
Warn: containerImage not pinned by hash: build/docker/Dockerfile.baremetal-agent:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/baremetal-base:v0.0.1 to registry.cn-beijing.aliyuncs.com/yunionio/baremetal-base:v0.0.1@sha256:50d2476c5e0178610c33a58d7c4ed6ee619a20e0eeb258e5bfe690c64e217462
Warn: containerImage not pinned by hash: build/docker/Dockerfile.baremetal-base:1: pin your Docker image by updating frolvlad/alpine-glibc:glibc-2.28 to frolvlad/alpine-glibc:glibc-2.28@sha256:f9c59f26bac90e623884250484b2892c2f79c022c908bb187b36bec376047ed6
Warn: containerImage not pinned by hash: build/docker/Dockerfile.climc:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/climc-base:v20200308 to registry.cn-beijing.aliyuncs.com/yunionio/climc-base:v20200308@sha256:24f8edaeabd474a0e9a78cdec3ac39d47eb88156d5c53167ebd4482924f48390
Warn: containerImage not pinned by hash: build/docker/Dockerfile.climc-base:1: pin your Docker image by updating frolvlad/alpine-glibc:glibc-2.28 to frolvlad/alpine-glibc:glibc-2.28@sha256:f9c59f26bac90e623884250484b2892c2f79c022c908bb187b36bec376047ed6
Warn: containerImage not pinned by hash: build/docker/Dockerfile.cloudevent:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest to registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest@sha256:355d51b81ea018f5272935f9a17cb36abd998f21194691148d2d88e97577e07c
Warn: containerImage not pinned by hash: build/docker/Dockerfile.cloudnet:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest to registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest@sha256:355d51b81ea018f5272935f9a17cb36abd998f21194691148d2d88e97577e07c
Warn: containerImage not pinned by hash: build/docker/Dockerfile.devtool:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest to registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest@sha256:355d51b81ea018f5272935f9a17cb36abd998f21194691148d2d88e97577e07c
Warn: containerImage not pinned by hash: build/docker/Dockerfile.esxi-agent:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest to registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest@sha256:355d51b81ea018f5272935f9a17cb36abd998f21194691148d2d88e97577e07c
Warn: containerImage not pinned by hash: build/docker/Dockerfile.glance:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/glance-base:latest to registry.cn-beijing.aliyuncs.com/yunionio/glance-base:latest@sha256:6ece8a5b7fceba32021cc588547e450eb68d51c570e877af372ead9c224c2da0
Warn: containerImage not pinned by hash: build/docker/Dockerfile.glance-base:1: pin your Docker image by updating frolvlad/alpine-glibc:glibc-2.28 to frolvlad/alpine-glibc:glibc-2.28@sha256:f9c59f26bac90e623884250484b2892c2f79c022c908bb187b36bec376047ed6
Warn: containerImage not pinned by hash: build/docker/Dockerfile.host:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/host-base:v0.2.0 to registry.cn-beijing.aliyuncs.com/yunionio/host-base:v0.2.0@sha256:bee4862f70e78edaeb7186714ded5a482eab4e08f8b63cbd9db5d7f3ad49a135
Warn: containerImage not pinned by hash: build/docker/Dockerfile.host-deployer:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/host-deployer-base:v0.0.3 to registry.cn-beijing.aliyuncs.com/yunionio/host-deployer-base:v0.0.3@sha256:2458c923d7f902cc4e9ef972f5ad630c0ef0e1a6815eb9a4b0fa10fcca7b7217
Warn: containerImage not pinned by hash: build/docker/Dockerfile.keystone:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest to registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest@sha256:355d51b81ea018f5272935f9a17cb36abd998f21194691148d2d88e97577e07c
Warn: containerImage not pinned by hash: build/docker/Dockerfile.logger:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest to registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest@sha256:355d51b81ea018f5272935f9a17cb36abd998f21194691148d2d88e97577e07c
Warn: containerImage not pinned by hash: build/docker/Dockerfile.monitor:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest to registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest@sha256:355d51b81ea018f5272935f9a17cb36abd998f21194691148d2d88e97577e07c
Warn: containerImage not pinned by hash: build/docker/Dockerfile.notify:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest to registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest@sha256:355d51b81ea018f5272935f9a17cb36abd998f21194691148d2d88e97577e07c
Warn: containerImage not pinned by hash: build/docker/Dockerfile.onecloud-base:1: pin your Docker image by updating frolvlad/alpine-glibc:glibc-2.28 to frolvlad/alpine-glibc:glibc-2.28@sha256:f9c59f26bac90e623884250484b2892c2f79c022c908bb187b36bec376047ed6
Warn: containerImage not pinned by hash: build/docker/Dockerfile.region:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest to registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest@sha256:355d51b81ea018f5272935f9a17cb36abd998f21194691148d2d88e97577e07c
Warn: containerImage not pinned by hash: build/docker/Dockerfile.region-dns:1: pin your Docker image by updating alpine:3.11.3 to alpine:3.11.3@sha256:ab00606a42621fb68f2ed6ad3c88be54397f981a7b70a79db3d1172b11c4367d
Warn: containerImage not pinned by hash: build/docker/Dockerfile.s3gateway:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest to registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest@sha256:355d51b81ea018f5272935f9a17cb36abd998f21194691148d2d88e97577e07c
Warn: containerImage not pinned by hash: build/docker/Dockerfile.scheduler:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest to registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest@sha256:355d51b81ea018f5272935f9a17cb36abd998f21194691148d2d88e97577e07c
Warn: containerImage not pinned by hash: build/docker/Dockerfile.vpcagent:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/openvswitch:2.10.4-0 to registry.cn-beijing.aliyuncs.com/yunionio/openvswitch:2.10.4-0@sha256:872a1cbf1ef5904898d3cf61669bceea82ce96e14d1436e6d47900f23681ce25
Warn: containerImage not pinned by hash: build/docker/Dockerfile.webconsole:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/webconsole-base:latest to registry.cn-beijing.aliyuncs.com/yunionio/webconsole-base:latest@sha256:94ac3fe9495bf73d06c764208d0694067e868f37455e8e28f56f58c53a0336e8
Warn: containerImage not pinned by hash: build/docker/Dockerfile.webconsole-base:1: pin your Docker image by updating yunion/kubectl:1.14.3 to yunion/kubectl:1.14.3@sha256:899f774d5eaf0b6f7c173cd77641b589c5ac142031a9b8d2c25fba7b2e2be77a
Warn: containerImage not pinned by hash: build/docker/Dockerfile.yunionconf:1: pin your Docker image by updating registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest to registry.cn-beijing.aliyuncs.com/yunionio/onecloud-base:latest@sha256:355d51b81ea018f5272935f9a17cb36abd998f21194691148d2d88e97577e07c
Warn: downloadThenRun not pinned by hash: scripts/coverage.sh:26
Warn: goCommand not pinned by hash: vendor/github.com/google/gopacket/.travis.golint.sh:5
Warn: goCommand not pinned by hash: vendor/github.com/google/gopacket/.travis.install.sh:5
Warn: goCommand not pinned by hash: vendor/github.com/google/gopacket/.travis.install.sh:6
Warn: goCommand not pinned by hash: vendor/github.com/google/gopacket/.travis.install.sh:7
Warn: goCommand not pinned by hash: vendor/github.com/google/gopacket/.travis.install.sh:8
Warn: goCommand not pinned by hash: vendor/github.com/google/gopacket/.travis.install.sh:9
Warn: goCommand not pinned by hash: vendor/github.com/googleapis/gnostic/extensions/COMPILE-EXTENSION.sh:1
Warn: goCommand not pinned by hash: vendor/github.com/json-iterator/go/build.sh:10
Warn: goCommand not pinned by hash: vendor/google.golang.org/grpc/vet.sh:36
Warn: goCommand not pinned by hash: vendor/google.golang.org/grpc/vet.sh:47
Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 19 third-party GitHubAction dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned
Info: 5 out of 15 goCommand dependencies pinned
Info: 0 out of 28 containerImage dependencies pinned