Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/R-CMD-check-dev.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/R-CMD-check-dev.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/R-CMD-check-dev.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/R-CMD-check-dev.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/R-CMD-check-dev.yaml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/R-CMD-check-dev.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/R-CMD-check-dev.yaml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/R-CMD-check-dev.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/R-CMD-check.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/R-CMD-check.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/R-CMD-check.yaml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/R-CMD-check.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/R-CMD-check.yaml:224: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/R-CMD-check.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/R-CMD-check.yaml:254: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/R-CMD-check.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/R-CMD-check.yaml:316: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/R-CMD-check.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fledge.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/fledge.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/fledge.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/fledge.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/fledge.yaml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/fledge.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ghcr.yaml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/ghcr.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/lock.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkgdown.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/pkgdown.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-commands.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/pr-commands.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-commands.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/pr-commands.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-commands.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/pr-commands.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-commands.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/pr-commands.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-commands.yaml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/pr-commands.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-commands.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/pr-commands.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-commands.yaml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/pr-commands.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-commands.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/pr-commands.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/revdep.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/revdep.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/revdep.yaml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/revdep.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/revdep.yaml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/revdep.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/revdep.yaml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/r-dbi/RPostgres/revdep.yaml/main?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating ghcr.io/cynkra/rig-ubuntu:main to ghcr.io/cynkra/rig-ubuntu:main@sha256:5a8d0afff0a315f3c23cb757f45ced5db4d0504e26c568290b8cb62417cd9619
Warn: npmCommand not pinned by hash: .github/workflows/R-CMD-check-dev.yaml:43
Warn: npmCommand not pinned by hash: .github/workflows/revdep.yaml:56
Info: 0 out of 16 GitHub-owned GitHubAction dependencies pinned
Info: 4 out of 15 third-party GitHubAction dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned
Info: 0 out of 2 npmCommand dependencies pinned