Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/go.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/go.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/go.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/go.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/pr.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/moul/generate-fake-data/release.yml/master?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:7
Warn: containerImage not pinned by hash: Dockerfile:17: pin your Docker image by updating alpine:3.16.0 to alpine:3.16.0@sha256:686d8c9dfa6f3ccfc8230bc3178d23f84eeaf7e457f36f271ab1acc53015037c
Info: 0 out of 17 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 7 third-party GitHubAction dependencies pinned
Info: 0 out of 2 containerImage dependencies pinned