Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arrow.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/arrow.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arrow.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/arrow.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arrow.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/arrow.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arrow.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/arrow.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arrow_flight.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/arrow_flight.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arrow_flight.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/arrow_flight.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arrow_flight.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/arrow_flight.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/audit.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/dev.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/dev.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/dev.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/dev.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev_pr.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/dev_pr.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev_pr.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/dev_pr.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/docs.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/integration.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/integration.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/integration.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/integration.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/integration.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/integration.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/integration.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/integration.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/integration.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/integration.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/miri.yaml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/miri.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/parquet.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/parquet.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/parquet.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/parquet.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/parquet.yml:178: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/parquet.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/parquet.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/parquet.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/parquet.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/parquet.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/parquet.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/parquet.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/parquet_derive.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/parquet_derive.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/parquet_derive.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/parquet_derive.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rust.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/rust.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rust.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/rust.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rust.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/rust.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rust.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/rust.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/take.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/arrow-rs/take.yml/main?enable=pin
Warn: downloadThenRun not pinned by hash: dev/release/verify-release-candidate.sh:99
Warn: pipCommand not pinned by hash: .github/workflows/integration.yml:159
Warn: pipCommand not pinned by hash: .github/workflows/integration.yml:163
Warn: pipCommand not pinned by hash: .github/workflows/parquet.yml:154
Info: 0 out of 43 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 third-party GitHubAction dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned
Info: 0 out of 3 pipCommand dependencies pinned