Info: Possibly incomplete results: error parsing shell code: a command can only contain words and redirects; encountered (: ya:0
Info: Possibly incomplete results: error parsing shell code: reached EOF without matching { with }: yt/examples/comment_service/tutorial/requests/requests.sh:0
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cache-heater.yaml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/cache-heater.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cache-heater.yaml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/cache-heater.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cache-heater.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/cache-heater.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cache-heater.yaml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/cache-heater.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cache-heater.yaml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/cache-heater.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chyt_release.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/chyt_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/chyt_release.yaml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/chyt_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/chyt_release.yaml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/chyt_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/chyt_release.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/chyt_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cpp.yaml:224: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/cpp.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cpp.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/cpp.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cpp.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/cpp.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cpp.yaml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/cpp.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cpp.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/cpp.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cpp.yaml:203: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/cpp.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-build.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/docs-build.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-build.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/docs-build.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-post-build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/docs-post-build.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-post-build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/docs-post-build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs-release.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/docs-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-release.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/docs-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-release.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/docs-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-release.yaml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/docs-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/go.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/go.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/go.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/go.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue_notifications.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/issue_notifications.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/java.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/java.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/java.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/java.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/java.yaml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/java.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/java.yaml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/java.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java_release.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/java_release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java_release.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/java_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/java_release.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/java_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/java_release.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/java_release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-check-is-allowed.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/pr-check-is-allowed.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-check-is-allowed.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/pr-check-is-allowed.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-check-is-allowed.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/pr-check-is-allowed.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-check-is-allowed.yaml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/pr-check-is-allowed.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-check-is-allowed.yaml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/pr-check-is-allowed.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-check.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/pr-check.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-check.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/pr-check.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-check.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/pr-check.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-check.yaml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/pr-check.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_notifications.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/pr_notifications.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/python_release.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/python_release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_release.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/python_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/python_release.yaml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/python_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/python_release.yaml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/python_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/python_release.yaml:173: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/python_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/python_release.yaml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/python_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/python_release.yaml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/python_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/python_release.yaml:231: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/python_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/query_tracker_release.yaml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/query_tracker_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/query_tracker_release.yaml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/query_tracker_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/query_tracker_release.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/query_tracker_release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/query_tracker_release.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/query_tracker_release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/query_tracker_release.yaml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/query_tracker_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/strawberry_release.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/strawberry_release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/strawberry_release.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/strawberry_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/strawberry_release.yaml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/strawberry_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/strawberry_release.yaml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/strawberry_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/systest.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/systest.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/systest.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/systest.yaml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/systest.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-docs-release-notes.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/update-docs-release-notes.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-docs-release-notes.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/update-docs-release-notes.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-docs-release-notes.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/update-docs-release-notes.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ytsaurus_release.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/ytsaurus_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ytsaurus_release.yaml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/ytsaurus_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ytsaurus_release.yaml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/ytsaurus_release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ytsaurus_release.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/ytsaurus/ytsaurus/ytsaurus_release.yaml/main?enable=pin
Warn: containerImage not pinned by hash: yt/docker/systest/Dockerfile:1: pin your Docker image by updating mirror.gcr.io/ubuntu:focal to mirror.gcr.io/ubuntu:focal@sha256:8e5c4f0285ecbb4ead070431d29b576a530d3166df73ec44affc1cd27555141b
Warn: containerImage not pinned by hash: yt/docker/ytsaurus-bundle/Dockerfile:7
Warn: containerImage not pinned by hash: yt/docker/ytsaurus-bundle/Dockerfile:21
Warn: containerImage not pinned by hash: yt/docker/ytsaurus-bundle/Dockerfile:30
Warn: containerImage not pinned by hash: yt/docker/ytsaurus/Dockerfile:23
Warn: containerImage not pinned by hash: yt/docker/ytsaurus/Dockerfile:34
Warn: containerImage not pinned by hash: yt/docker/ytsaurus/Dockerfile:41
Warn: containerImage not pinned by hash: yt/docker/ytsaurus/Dockerfile:80
Warn: containerImage not pinned by hash: yt/docker/ytsaurus/Dockerfile:108
Warn: containerImage not pinned by hash: yt/docker/ytsaurus/Dockerfile:114
Warn: containerImage not pinned by hash: yt/docker/ytsaurus/Dockerfile:129
Warn: containerImage not pinned by hash: yt/docker/ytsaurus/Dockerfile:144
Warn: containerImage not pinned by hash: yt/docker/ytsaurus/Dockerfile:177
Warn: containerImage not pinned by hash: yt/docker/ytsaurus/Dockerfile:196
Warn: containerImage not pinned by hash: yt/docker/ytsaurus/Dockerfile:209
Warn: containerImage not pinned by hash: yt/docker/ytsaurus/Dockerfile:232
Warn: containerImage not pinned by hash: yt/docker/ytsaurus/Dockerfile:243
Warn: containerImage not pinned by hash: yt/docker/ytsaurus/Dockerfile:280
Warn: containerImage not pinned by hash: yt/docker/ytsaurus/Dockerfile:294
Warn: containerImage not pinned by hash: yt/docker/ytsaurus/Dockerfile:343
Warn: containerImage not pinned by hash: yt/odin/Dockerfile:23
Warn: containerImage not pinned by hash: yt/odin/Dockerfile:90
Warn: containerImage not pinned by hash: yt/odin/Dockerfile:137
Warn: pipCommand not pinned by hash: yt/docker/ytsaurus/Dockerfile:318-319
Warn: pipCommand not pinned by hash: yt/docker/ytsaurus/Dockerfile:321-326
Warn: pipCommand not pinned by hash: yt/docker/ytsaurus/Dockerfile:328-331
Warn: pipCommand not pinned by hash: yt/docker/ytsaurus/Dockerfile:328-331
Warn: pipCommand not pinned by hash: yt/docker/ytsaurus/Dockerfile:328-331
Warn: pipCommand not pinned by hash: yt/odin/Dockerfile:61
Warn: pipCommand not pinned by hash: yt/odin/Dockerfile:78-86
Warn: pipCommand not pinned by hash: yt/odin/Dockerfile:120-121
Warn: pipCommand not pinned by hash: yt/odin/Dockerfile:123-125
Warn: pipCommand not pinned by hash: yt/odin/Dockerfile:123-125
Warn: pipCommand not pinned by hash: yt/odin/tests/run_tests.sh:18
Warn: pipCommand not pinned by hash: yt/odin/tests/run_tests.sh:19
Warn: pipCommand not pinned by hash: yt/python/packages/build_ytsaurus_packages.sh:3
Warn: pipCommand not pinned by hash: yt/python/packages/build_ytsaurus_packages.sh:64
Warn: pipCommand not pinned by hash: yt/yt/scripts/prepare_pytest_environment.sh:14
Warn: pipCommand not pinned by hash: yt/yt/scripts/prepare_pytest_environment.sh:36
Warn: pipCommand not pinned by hash: .github/workflows/python_release.yaml:98
Warn: pipCommand not pinned by hash: .github/workflows/python_release.yaml:105
Info: 0 out of 28 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 45 third-party GitHubAction dependencies pinned
Info: 0 out of 23 containerImage dependencies pinned
Info: 0 out of 18 pipCommand dependencies pinned