Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/apidiff.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/kubernetes-sigs/kustomize/apidiff.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/apidiff.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/kubernetes-sigs/kustomize/apidiff.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/apidiff.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/kubernetes-sigs/kustomize/apidiff.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/apidiff.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/kubernetes-sigs/kustomize/apidiff.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/kubernetes-sigs/kustomize/go.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/go.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kubernetes-sigs/kustomize/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/kubernetes-sigs/kustomize/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/kubernetes-sigs/kustomize/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/kubernetes-sigs/kustomize/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/kubernetes-sigs/kustomize/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/kubernetes-sigs/kustomize/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/kubernetes-sigs/kustomize/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/kubernetes-sigs/kustomize/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/kubernetes-sigs/kustomize/go.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kubernetes-sigs/kustomize/release.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/kubernetes-sigs/kustomize/release.yaml/master?enable=pin
Warn: containerImage not pinned by hash: cmd/config/internal/commands/e2e/e2econtainerconfig/Dockerfile:4: pin your Docker image by updating public.ecr.aws/docker/library/golang:1.22.7-bullseye to public.ecr.aws/docker/library/golang:1.22.7-bullseye@sha256:61a4f8fb120df10c331677944717ebe2a10521096970aeed0bcb4043bd9efa13
Warn: containerImage not pinned by hash: cmd/config/internal/commands/e2e/e2econtainerconfig/Dockerfile:16: pin your Docker image by updating alpine:latest to alpine:latest@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
Warn: containerImage not pinned by hash: cmd/config/internal/commands/e2e/e2econtainerenvgenerator/Dockerfile:4: pin your Docker image by updating public.ecr.aws/docker/library/golang:1.22.7-bullseye to public.ecr.aws/docker/library/golang:1.22.7-bullseye@sha256:61a4f8fb120df10c331677944717ebe2a10521096970aeed0bcb4043bd9efa13
Warn: containerImage not pinned by hash: cmd/config/internal/commands/e2e/e2econtainerenvgenerator/Dockerfile:16: pin your Docker image by updating alpine:latest to alpine:latest@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
Warn: containerImage not pinned by hash: cmd/config/internal/commands/e2e/e2econtainermountbind/Dockerfile:4: pin your Docker image by updating public.ecr.aws/docker/library/golang:1.22.7-bullseye to public.ecr.aws/docker/library/golang:1.22.7-bullseye@sha256:61a4f8fb120df10c331677944717ebe2a10521096970aeed0bcb4043bd9efa13
Warn: containerImage not pinned by hash: cmd/config/internal/commands/e2e/e2econtainermountbind/Dockerfile:16: pin your Docker image by updating alpine:latest to alpine:latest@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
Warn: containerImage not pinned by hash: cmd/config/internal/commands/e2e/e2econtainersimplegenerator/Dockerfile:4: pin your Docker image by updating public.ecr.aws/docker/library/golang:1.22.7-bullseye to public.ecr.aws/docker/library/golang:1.22.7-bullseye@sha256:61a4f8fb120df10c331677944717ebe2a10521096970aeed0bcb4043bd9efa13
Warn: containerImage not pinned by hash: cmd/config/internal/commands/e2e/e2econtainersimplegenerator/Dockerfile:16: pin your Docker image by updating alpine:latest to alpine:latest@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
Warn: containerImage not pinned by hash: functions/examples/application-cr/image/Dockerfile:4: pin your Docker image by updating public.ecr.aws/docker/library/golang:1.22.7-bullseye to public.ecr.aws/docker/library/golang:1.22.7-bullseye@sha256:61a4f8fb120df10c331677944717ebe2a10521096970aeed0bcb4043bd9efa13
Warn: containerImage not pinned by hash: functions/examples/application-cr/image/Dockerfile:13: pin your Docker image by updating alpine:latest to alpine:latest@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
Warn: containerImage not pinned by hash: functions/examples/injection-tshirt-sizes/image/Dockerfile:4: pin your Docker image by updating public.ecr.aws/docker/library/golang:1.22.7-bullseye to public.ecr.aws/docker/library/golang:1.22.7-bullseye@sha256:61a4f8fb120df10c331677944717ebe2a10521096970aeed0bcb4043bd9efa13
Warn: containerImage not pinned by hash: functions/examples/injection-tshirt-sizes/image/Dockerfile:13: pin your Docker image by updating alpine:latest to alpine:latest@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
Warn: containerImage not pinned by hash: functions/examples/template-go-nginx/image/Dockerfile:4: pin your Docker image by updating public.ecr.aws/docker/library/golang:1.22.7-bullseye to public.ecr.aws/docker/library/golang:1.22.7-bullseye@sha256:61a4f8fb120df10c331677944717ebe2a10521096970aeed0bcb4043bd9efa13
Warn: containerImage not pinned by hash: functions/examples/template-go-nginx/image/Dockerfile:13: pin your Docker image by updating alpine:latest to alpine:latest@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
Warn: containerImage not pinned by hash: functions/examples/template-heredoc-cockroachdb/image/Dockerfile:7
Warn: containerImage not pinned by hash: functions/examples/validator-kubeval/image/Dockerfile:4
Warn: containerImage not pinned by hash: functions/examples/validator-kubeval/image/Dockerfile:8
Warn: containerImage not pinned by hash: functions/examples/validator-kubeval/image/Dockerfile:17: pin your Docker image by updating alpine:latest to alpine:latest@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
Warn: containerImage not pinned by hash: functions/examples/validator-resource-requests/image/Dockerfile:4: pin your Docker image by updating public.ecr.aws/docker/library/golang:1.22.7-bullseye to public.ecr.aws/docker/library/golang:1.22.7-bullseye@sha256:61a4f8fb120df10c331677944717ebe2a10521096970aeed0bcb4043bd9efa13
Warn: containerImage not pinned by hash: functions/examples/validator-resource-requests/image/Dockerfile:13: pin your Docker image by updating alpine:latest to alpine:latest@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
Warn: containerImage not pinned by hash: hack/krmFunctionBenchmark/example_tshirt/execfn/Dockerfile:4: pin your Docker image by updating alpine:latest to alpine:latest@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
Warn: containerImage not pinned by hash: hack/krmFunctionBenchmark/label_namespace/execfn/Dockerfile:4: pin your Docker image by updating alpine:latest to alpine:latest@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
Warn: containerImage not pinned by hash: kustomize.Dockerfile:5
Warn: containerImage not pinned by hash: kustomize.Dockerfile:17: pin your Docker image by updating alpine to alpine@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
Warn: containerImage not pinned by hash: kyaml/fn/framework/example/Dockerfile:4: pin your Docker image by updating public.ecr.aws/docker/library/golang:1.22.7-bullseye to public.ecr.aws/docker/library/golang:1.22.7-bullseye@sha256:61a4f8fb120df10c331677944717ebe2a10521096970aeed0bcb4043bd9efa13
Warn: containerImage not pinned by hash: kyaml/fn/framework/example/Dockerfile:10: pin your Docker image by updating alpine:latest to alpine:latest@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
Warn: containerImage not pinned by hash: site/Dockerfile:6: pin your Docker image by updating docker.io/library/golang:1.22-alpine to docker.io/library/golang:1.22-alpine@sha256:58a82e883f0d11f52204d2baa58a62dc565c409105773526340f678c9dc2558f
Warn: containerImage not pinned by hash: site/Dockerfile:22: pin your Docker image by updating docker.io/library/golang:1.22-alpine to docker.io/library/golang:1.22-alpine@sha256:58a82e883f0d11f52204d2baa58a62dc565c409105773526340f678c9dc2558f
Warn: npmCommand not pinned by hash: hack/krmFunctionBenchmark/label_namespace/execfn/Dockerfile:9
Warn: npmCommand not pinned by hash: hack/krmFunctionBenchmark/label_namespace/execfn/Dockerfile:18
Warn: npmCommand not pinned by hash: site/Dockerfile:35
Info: 0 out of 13 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 3 third-party GitHubAction dependencies pinned
Info: 0 out of 28 containerImage dependencies pinned
Info: 0 out of 3 npmCommand dependencies pinned
Info: 3 out of 3 goCommand dependencies pinned