Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit-fix.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/audit-fix.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit-fix.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/audit-fix.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/audit-fix.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/audit-fix.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cla.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/cla.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/conventional-pr-check.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/conventional-pr-check.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/conventional-pr-check.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/conventional-pr-check.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/conventional-pr-check.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/conventional-pr-check.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/e2e.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/e2e.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/e2e.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/e2e.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/e2e.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/e2e.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/e2e.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/e2e.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-alpha.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/publish-alpha.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-alpha.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/publish-alpha.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-nightly.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/publish-nightly.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-nightly.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/publish-nightly.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-nightly.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/publish-nightly.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-packages.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/publish-packages.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-packages.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/publish-packages.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/unit.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/unit.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/unit.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/unit.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/unit.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/unit.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/deephaven/web-client-ui/unit.yml/main?enable=pin
Warn: containerImage not pinned by hash: tests/docker-scripts/Dockerfile:4
Warn: containerImage not pinned by hash: tests/docker-scripts/Dockerfile:14
Warn: downloadThenRun not pinned by hash: tests/docker-scripts/Dockerfile:35
Info: 0 out of 22 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 6 third-party GitHubAction dependencies pinned
Info: 5 out of 5 npmCommand dependencies pinned
Info: 0 out of 2 containerImage dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned