Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/codeql.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/codeql.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/codeql.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/codeql.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/intel.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/intel.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/linux.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/linux.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:167: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/linux.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/linux.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:223: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/linux.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/linux.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/linux.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/linux.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:308: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/linux.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/linux.yml:309: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/linux.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/linux.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/linux.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/linux.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/linux.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/linux.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/linux.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/macos.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/macos.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/macos.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/macos.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nvidia.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/nvidia.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nvidia.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/nvidia.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/source.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/source.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/source.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/source.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/source.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/source.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/source.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/source.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tooling.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/tooling.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tooling.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/tooling.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tooling.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/tooling.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tooling.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/tooling.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/windows.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/windows.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/windows.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/windows.yml/dev?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/windows.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/windows.yml/dev?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/windows.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/openPMD/openPMD-api/windows.yml/dev?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:4
Warn: containerImage not pinned by hash: Dockerfile:116: pin your Docker image by updating debian:sid to debian:sid@sha256:a0cee49d595392ee8fcb40ff8e370e71496303a1a0f50cd7cbfd13e050375712
Warn: containerImage not pinned by hash: Dockerfile:131: pin your Docker image by updating debian:bullseye to debian:bullseye@sha256:6d4f6b40afca63b59a44ffcedbb2e457e83b645710916d7f094b79c6c591ac28
Warn: containerImage not pinned by hash: Dockerfile:146: pin your Docker image by updating debian:bullseye to debian:bullseye@sha256:6d4f6b40afca63b59a44ffcedbb2e457e83b645710916d7f094b79c6c591ac28
Warn: containerImage not pinned by hash: Dockerfile:161: pin your Docker image by updating debian:bullseye to debian:bullseye@sha256:6d4f6b40afca63b59a44ffcedbb2e457e83b645710916d7f094b79c6c591ac28
Warn: containerImage not pinned by hash: Dockerfile:176: pin your Docker image by updating debian:bullseye to debian:bullseye@sha256:6d4f6b40afca63b59a44ffcedbb2e457e83b645710916d7f094b79c6c591ac28
Warn: containerImage not pinned by hash: Dockerfile:191: pin your Docker image by updating debian:bullseye to debian:bullseye@sha256:6d4f6b40afca63b59a44ffcedbb2e457e83b645710916d7f094b79c6c591ac28
Warn: containerImage not pinned by hash: Dockerfile:206: pin your Docker image by updating quay.io/pypa/manylinux2010_x86_64 to quay.io/pypa/manylinux2010_x86_64@sha256:3b5eb5ab9bc73b93740ae4eda9962078951cd3bb7efe837b770360e78c7366fb
Warn: pipCommand not pinned by hash: share/openPMD/validate_files.sh:31
Warn: pipCommand not pinned by hash: .github/workflows/codeql.yml:38
Warn: pipCommand not pinned by hash: .github/workflows/codeql.yml:39
Warn: pipCommand not pinned by hash: .github/workflows/codeql.yml:40
Warn: pipCommand not pinned by hash: .github/workflows/codeql.yml:42
Warn: pipCommand not pinned by hash: .github/workflows/codeql.yml:43
Warn: pipCommand not pinned by hash: .github/workflows/codeql.yml:44
Warn: pipCommand not pinned by hash: .github/workflows/linux.yml:232
Warn: pipCommand not pinned by hash: .github/workflows/linux.yml:233
Warn: pipCommand not pinned by hash: .github/workflows/linux.yml:234
Warn: pipCommand not pinned by hash: .github/workflows/linux.yml:235
Warn: pipCommand not pinned by hash: .github/workflows/linux.yml:236
Warn: pipCommand not pinned by hash: .github/workflows/linux.yml:237
Warn: pipCommand not pinned by hash: .github/workflows/macos.yml:28
Warn: pipCommand not pinned by hash: .github/workflows/macos.yml:56
Warn: pipCommand not pinned by hash: .github/workflows/source.yml:32
Warn: pipCommand not pinned by hash: .github/workflows/source.yml:22
Warn: pipCommand not pinned by hash: .github/workflows/tooling.yml:52
Warn: pipCommand not pinned by hash: .github/workflows/tooling.yml:53
Info: 0 out of 35 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 4 third-party GitHubAction dependencies pinned
Info: 0 out of 8 containerImage dependencies pinned
Info: 0 out of 19 pipCommand dependencies pinned