Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/build.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/build.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coverage.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/coverage.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coverage.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/coverage.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coverage.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/coverage.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coverage.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/coverage.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/coverage.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/coverage.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/coverage.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/coverage.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/coverage.yaml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/coverage.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/install.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/install.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/install.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/install.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/style.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/style.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/style.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/functions-framework-cpp/style.yaml/main?enable=pin
Warn: containerImage not pinned by hash: build_scripts/Dockerfile:15
Warn: containerImage not pinned by hash: build_scripts/Dockerfile:47
Warn: containerImage not pinned by hash: build_scripts/Dockerfile:53
Warn: containerImage not pinned by hash: build_scripts/Dockerfile:63
Warn: containerImage not pinned by hash: build_scripts/Dockerfile:98
Warn: containerImage not pinned by hash: build_scripts/Dockerfile:122
Warn: containerImage not pinned by hash: build_scripts/Dockerfile:130
Warn: containerImage not pinned by hash: build_scripts/Dockerfile:142
Warn: containerImage not pinned by hash: build_scripts/Dockerfile:156
Warn: containerImage not pinned by hash: build_scripts/Dockerfile:170
Warn: containerImage not pinned by hash: build_scripts/pack.Dockerfile:15: pin your Docker image by updating busybox to busybox@sha256:f85340bf132ae937d2c2a763b8335c9bab35d6e8293f70f606b9c6178d84f42b
Warn: containerImage not pinned by hash: build_scripts/pack.Dockerfile:19: pin your Docker image by updating gcr.io/distroless/base to gcr.io/distroless/base@sha256:201ef9125ff3f55fda8e0697eff0b3ce9078366503ef066653635a3ac3ed9c26
Warn: containerImage not pinned by hash: ci/cloudbuild/dockerfiles/fedora-38.Dockerfile:15: pin your Docker image by updating fedora:38 to fedora:38@sha256:b9ff6f23cceb5bde20bb1f79b492b98d71ef7a7ae518ca1b15b26661a11e6a94
Warn: pipCommand not pinned by hash: .github/workflows/style.yaml:31
Info: 0 out of 21 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 4 third-party GitHubAction dependencies pinned
Info: 0 out of 13 containerImage dependencies pinned
Info: 0 out of 1 pipCommand dependencies pinned