Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/custom-build.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/custom-build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/custom-build.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/custom-build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/docker.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/docker.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/push.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/push.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/push.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/push.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/push.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/push.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/push.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/push.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/push.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/push.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/push.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/push.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/push.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push.yml:219: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/push.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/push.yml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/push.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push.yml:247: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/push.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi-release.yml:8: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/pypi-release.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi-release.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/pypi-release.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi-release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/pypi-release.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/support.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kivy/python-for-android/support.yml/develop?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:21: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:01a3ee0b5e413cefaaffc6abe68c9c37879ae3cced56a8e088b1649e5b269eee
Warn: pipCommand not pinned by hash: .github/workflows/push.yml:250
Warn: pipCommand not pinned by hash: .github/workflows/push.yml:251
Warn: pipCommand not pinned by hash: .github/workflows/push.yml:29
Warn: pipCommand not pinned by hash: .github/workflows/push.yml:30
Warn: pipCommand not pinned by hash: .github/workflows/push.yml:50
Warn: pipCommand not pinned by hash: .github/workflows/push.yml:51
Warn: pipCommand not pinned by hash: .github/workflows/push.yml:139
Warn: pipCommand not pinned by hash: .github/workflows/push.yml:224
Warn: pipCommand not pinned by hash: .github/workflows/pypi-release.yml:15
Info: 0 out of 18 GitHub-owned GitHubAction dependencies pinned
Info: 1 out of 6 third-party GitHubAction dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned
Info: 0 out of 9 pipCommand dependencies pinned