Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-general-formatting-task.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-general-formatting-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-general-formatting-task.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-general-formatting-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-general-formatting-task.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-general-formatting-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-go-dependencies-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-go-dependencies-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-go-dependencies-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-go-dependencies-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-go-dependencies-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-go-dependencies-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-go-dependencies-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-go-dependencies-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-go-dependencies-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-go-dependencies-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-go-dependencies-task.yml:152: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-go-dependencies-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-markdown-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-markdown-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-markdown-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-markdown-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-markdown-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-markdown-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-markdown-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-markdown-task.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-markdown-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-mkdocs-task.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-mkdocs-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-mkdocs-task.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-mkdocs-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-mkdocs-task.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-mkdocs-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-mkdocs-task.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-mkdocs-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-notarization-certificates.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-notarization-certificates.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-notarization-certificates.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-notarization-certificates.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-prettier-formatting-task.yml:243: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-prettier-formatting-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-prettier-formatting-task.yml:246: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-prettier-formatting-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-prettier-formatting-task.yml:251: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-prettier-formatting-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-python-task.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-python-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-python-task.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-python-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-python-task.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-python-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-python-task.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-python-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-python-task.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-python-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-python-task.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-python-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-python-task.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/check-python-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-cobra-mkdocs-versioned-poetry.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/deploy-cobra-mkdocs-versioned-poetry.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-cobra-mkdocs-versioned-poetry.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/deploy-cobra-mkdocs-versioned-poetry.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-cobra-mkdocs-versioned-poetry.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/deploy-cobra-mkdocs-versioned-poetry.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-cobra-mkdocs-versioned-poetry.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/deploy-cobra-mkdocs-versioned-poetry.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate-index.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/generate-index.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/generate-index.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/generate-index.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate-index.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/generate-index.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/generate-index.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/generate-index.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-tester-task.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/publish-go-tester-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-tester-task.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/publish-go-tester-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-go-tester-task.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/publish-go-tester-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-tester-task.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/publish-go-tester-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-tester-task.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/publish-go-tester-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-go-tester-task.yml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/publish-go-tester-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-crosscompile-task.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/release-go-crosscompile-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-go-crosscompile-task.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/release-go-crosscompile-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-crosscompile-task.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/release-go-crosscompile-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-go-crosscompile-task.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/release-go-crosscompile-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-crosscompile-task.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/release-go-crosscompile-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-crosscompile-task.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/release-go-crosscompile-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-crosscompile-task.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/release-go-crosscompile-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-go-crosscompile-task.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/release-go-crosscompile-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-crosscompile-task.yml:197: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/release-go-crosscompile-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-crosscompile-task.yml:213: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/release-go-crosscompile-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-go-crosscompile-task.yml:216: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/release-go-crosscompile-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-go-crosscompile-task.yml:223: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/release-go-crosscompile-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-go-crosscompile-task.yml:249: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/release-go-crosscompile-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-go-crosscompile-task.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/release-go-crosscompile-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-labels.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/sync-labels.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-labels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/sync-labels.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-labels.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/sync-labels.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-labels.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/sync-labels.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-labels.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/sync-labels.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-labels.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/sync-labels.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-labels.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/sync-labels.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go-integration-task.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/test-go-integration-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go-integration-task.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/test-go-integration-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go-integration-task.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/test-go-integration-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-go-integration-task.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/test-go-integration-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/test-go-task.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/test-go-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/test-go-task.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-go-task.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/arduino/arduino-fwuploader/test-go-task.yml/main?enable=pin
Warn: pipCommand not pinned by hash: .github/workflows/check-mkdocs-task.yml:91
Warn: pipCommand not pinned by hash: .github/workflows/check-python-task.yml:80
Warn: pipCommand not pinned by hash: .github/workflows/check-python-task.yml:111
Warn: pipCommand not pinned by hash: .github/workflows/deploy-cobra-mkdocs-versioned-poetry.yml:79
Warn: pipCommand not pinned by hash: .github/workflows/deploy-cobra-mkdocs-versioned-poetry.yml:80
Warn: pipCommand not pinned by hash: .github/workflows/generate-index.yml:46
Warn: npmCommand not pinned by hash: .github/workflows/sync-labels.yml:137
Warn: npmCommand not pinned by hash: .github/workflows/sync-labels.yml:43
Warn: pipCommand not pinned by hash: .github/workflows/test-go-integration-task.yml:99
Info: 0 out of 47 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 34 third-party GitHubAction dependencies pinned
Info: 0 out of 7 pipCommand dependencies pinned
Info: 0 out of 2 npmCommand dependencies pinned