Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/codeql.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/codeql.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/codeql.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labels.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/labels.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/labels.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/labels.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/lock.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/publish.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/publish.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-drafter.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/release-drafter.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/stale.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/static-analysis.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/static-analysis.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/static-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/static-analysis.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/static-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/static-analysis.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/static-analysis.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/static-analysis.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/static-analysis.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/static-analysis.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/test.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/test.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/test.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/test.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/test.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/test.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/test.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/test.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/test.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/test.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/bachya/simplisafe-python/test.yml/dev?enable=pin
Warn: pipCommand not pinned by hash: script/setup:9
Warn: pipCommand not pinned by hash: .github/workflows/publish.yml:25
Warn: pipCommand not pinned by hash: .github/workflows/static-analysis.yml:47
Warn: pipCommand not pinned by hash: .github/workflows/test.yml:54
Warn: pipCommand not pinned by hash: .github/workflows/test.yml:117
Info: 0 out of 21 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 5 third-party GitHubAction dependencies pinned
Info: 0 out of 5 pipCommand dependencies pinned