Info: Possibly incomplete results: error parsing shell code: invalid parameter name: activate.sh:0
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/locker.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/dotnet/aspnetcore/locker.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/markdownlint.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/dotnet/aspnetcore/markdownlint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/markdownlint.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/dotnet/aspnetcore/markdownlint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-sync.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/dotnet/aspnetcore/runtime-sync.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-sync.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/dotnet/aspnetcore/runtime-sync.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime-sync.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/dotnet/aspnetcore/runtime-sync.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime-sync.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/dotnet/aspnetcore/runtime-sync.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-jquery-validate.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/dotnet/aspnetcore/update-jquery-validate.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-jquery-validate.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/dotnet/aspnetcore/update-jquery-validate.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-jquery-validate.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/dotnet/aspnetcore/update-jquery-validate.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-sdk.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/dotnet/aspnetcore/update-sdk.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-selenium-and-playwright-dependencies.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/dotnet/aspnetcore/update-selenium-and-playwright-dependencies.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-package-lock-json.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/dotnet/aspnetcore/validate-npm-package-lock-json.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-npm-package-lock-json.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/dotnet/aspnetcore/validate-npm-package-lock-json.yml/main?enable=pin
Warn: containerImage not pinned by hash: .devcontainer/Dockerfile:3: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/dotnet:latest to mcr.microsoft.com/vscode/devcontainers/dotnet:latest@sha256:f84f5dc61134aacd099c03f58663994da48047a6f43b9d5ba446a5b5ad2074aa
Warn: containerImage not pinned by hash: src/Components/benchmarkapps/Wasm.Performance/dockerfile:1
Warn: containerImage not pinned by hash: src/Components/benchmarkapps/Wasm.Performance/dockerfile:32
Warn: downloadThenRun not pinned by hash: src/Components/benchmarkapps/Wasm.Performance/dockerfile:7
Warn: pipCommand not pinned by hash: src/Middleware/WebSockets/setup-wstest.sh:20
Warn: npmCommand not pinned by hash: .github/workflows/locker.yml:33
Warn: npmCommand not pinned by hash: .github/workflows/markdownlint.yml:27
Warn: npmCommand not pinned by hash: .github/workflows/update-jquery-validate.yml:32
Info: 0 out of 12 GitHub-owned GitHubAction dependencies pinned
Info: 1 out of 3 third-party GitHubAction dependencies pinned
Info: 0 out of 1 pipCommand dependencies pinned
Info: 0 out of 3 npmCommand dependencies pinned
Info: 0 out of 3 containerImage dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned