Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:173: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:178: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:235: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:246: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:257: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:273: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:288: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:291: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:296: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:299: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:308: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:329: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/git-repo-sync.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/git-repo-sync.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:464: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:471: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:507: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:719: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:381: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:553: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:608: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:611: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-release.yml:616: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:619: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:628: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:683: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:744: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:253: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:301: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:419: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:424: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:461: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:464: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:469: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:472: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:481: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:546: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:549: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:553: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:235: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:354: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:583: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:586: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:590: update your workflow using https://app.stepsecurity.io/secureworkflow/pmd/pmd/publish-snapshot.yml/main?enable=pin
Warn: containerImage not pinned by hash: docs/Dockerfile:1: pin your Docker image by updating ruby:2.4.2 to ruby:2.4.2@sha256:7271d0cd55da37b6f28924c9452871d77e828c4d38ef3438cfc179388209e51f
Info: 0 out of 76 GitHub-owned GitHubAction dependencies pinned
Info: 1 out of 5 third-party GitHubAction dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned