Warn: third-party GitHubAction not pinned by hash: .github/workflows/auto-merge-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/auto-merge-dependabot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/codeql.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/conflicting-pr-label.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/conflicting-pr-label.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/project-auto-add.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/project-auto-add.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-public-api-surface.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/validate-public-api-surface.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-public-api-surface.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/validate-public-api-surface.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-public-api-surface.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/validate-public-api-surface.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-public-api-surface.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/validate-public-api-surface.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-public-api-surface.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/validate-public-api-surface.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-public-api-surface.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoftgraph/msgraph-sdk-python/validate-public-api-surface.yml/main?enable=pin
Warn: pipCommand not pinned by hash: .github/workflows/build.yml:27
Warn: pipCommand not pinned by hash: .github/workflows/build.yml:28
Warn: pipCommand not pinned by hash: .github/workflows/publish.yml:27
Info: 0 out of 12 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 5 third-party GitHubAction dependencies pinned
Info: 0 out of 3 pipCommand dependencies pinned