Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/add-3plicense-warning.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/add-3plicense-warning.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-to-pypi.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/publish-to-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-to-pypi.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/publish-to-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-forecast-explainer-tests.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-forecast-explainer-tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-forecast-explainer-tests.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-forecast-explainer-tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-forecast-unit-tests.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-forecast-unit-tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-forecast-unit-tests.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-forecast-unit-tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-operators-unit-tests.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-operators-unit-tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-operators-unit-tests.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-operators-unit-tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-unittests-default_setup.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-unittests-default_setup.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-unittests-default_setup.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-unittests-default_setup.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-unittests-py310-py311.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-unittests-py310-py311.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-unittests-py310-py311.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-unittests-py310-py311.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-unittests-py39-cov-report.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-unittests-py39-cov-report.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-unittests-py39-cov-report.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-unittests-py39-cov-report.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-unittests-py39-cov-report.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-unittests-py39-cov-report.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-unittests-py39-cov-report.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-unittests-py39-cov-report.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-unittests-py39-cov-report.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-unittests-py39-cov-report.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-unittests-py39-cov-report.yml:194: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-unittests-py39-cov-report.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-unittests-py39-cov-report.yml:211: update your workflow using https://app.stepsecurity.io/secureworkflow/oracle/accelerated-data-science/run-unittests-py39-cov-report.yml/main?enable=pin
Warn: containerImage not pinned by hash: ads/feature_store/docs/Dockerfile:1: pin your Docker image by updating python:3.8 to python:3.8@sha256:d411270700143fa2683cc8264d9fa5d3279fd3b6afff62ae81ea2f9d070e390c
Warn: containerImage not pinned by hash: ads/opctl/docker/Dockerfile.job:4: pin your Docker image by updating ghcr.io/oracle/oraclelinux:7-slim to ghcr.io/oracle/oraclelinux:7-slim@sha256:14d316c3d42f76a9398dd7925735cd0bc7d15479f29c5d8e250cf3b83cf4a387
Warn: containerImage not pinned by hash: ads/opctl/docker/Dockerfile.job.arm:5: pin your Docker image by updating ghcr.io/oracle/oraclelinux:8-slim to ghcr.io/oracle/oraclelinux:8-slim@sha256:62298d5307a7d879708f3cc66d5920abbc8f6a422fcf570492b31e4570b1f4c8
Warn: containerImage not pinned by hash: ads/opctl/docker/Dockerfile.job.gpu:4: pin your Docker image by updating ghcr.io/oracle/oraclelinux:7-slim to ghcr.io/oracle/oraclelinux:7-slim@sha256:14d316c3d42f76a9398dd7925735cd0bc7d15479f29c5d8e250cf3b83cf4a387
Warn: containerImage not pinned by hash: ads/opctl/docker/operator/Dockerfile:4
Warn: containerImage not pinned by hash: ads/opctl/docker/operator/Dockerfile.gpu:4
Warn: containerImage not pinned by hash: tests/unitary/with_extras/operator/test_files/Dockerfile.test:1
Warn: downloadThenRun not pinned by hash: ads/opctl/docker/Dockerfile.job:66-69
Warn: downloadThenRun not pinned by hash: ads/opctl/docker/Dockerfile.job.arm:70-73
Warn: downloadThenRun not pinned by hash: ads/opctl/docker/Dockerfile.job.gpu:111-114
Warn: pipCommand not pinned by hash: .github/workflows/publish-to-pypi.yml:19
Warn: pipCommand not pinned by hash: .github/workflows/publish-to-pypi.yml:41
Warn: pipCommand not pinned by hash: .github/workflows/run-forecast-explainer-tests.yml:56
Warn: pipCommand not pinned by hash: .github/workflows/run-forecast-explainer-tests.yml:57
Warn: pipCommand not pinned by hash: .github/workflows/run-forecast-explainer-tests.yml:58
Warn: pipCommand not pinned by hash: .github/workflows/run-forecast-unit-tests.yml:58
Warn: pipCommand not pinned by hash: .github/workflows/run-forecast-unit-tests.yml:59
Warn: pipCommand not pinned by hash: .github/workflows/run-forecast-unit-tests.yml:60
Warn: pipCommand not pinned by hash: .github/workflows/run-operators-unit-tests.yml:54
Warn: pipCommand not pinned by hash: .github/workflows/run-unittests-default_setup.yml:62
Warn: pipCommand not pinned by hash: .github/workflows/run-unittests-py39-cov-report.yml:78
Warn: pipCommand not pinned by hash: .github/workflows/run-unittests-py39-cov-report.yml:81
Warn: pipCommand not pinned by hash: .github/workflows/run-unittests-py39-cov-report.yml:150
Warn: pipCommand not pinned by hash: .github/workflows/run-unittests-py39-cov-report.yml:179
Info: 0 out of 24 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 7 containerImage dependencies pinned
Info: 0 out of 3 downloadThenRun dependencies pinned
Info: 1 out of 15 pipCommand dependencies pinned