Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-website.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/build-website.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-website.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/build-website.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-website.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/build-website.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-website.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/build-website.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint-fmt.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/lint-fmt.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint-fmt.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/lint-fmt.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint-fmt.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/lint-fmt.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint-fmt.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/lint-fmt.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint-fmt.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/lint-fmt.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint-fmt.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/lint-fmt.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-website.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/publish-website.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-website.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/publish-website.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-website.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/publish-website.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-website.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/publish-website.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:180: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:235: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:255: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/rustwasm/gloo/tests.yml/master?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/build-website.yml:31
Warn: downloadThenRun not pinned by hash: .github/workflows/tests.yml:52
Warn: downloadThenRun not pinned by hash: .github/workflows/tests.yml:99
Warn: downloadThenRun not pinned by hash: .github/workflows/tests.yml:178
Warn: downloadThenRun not pinned by hash: .github/workflows/tests.yml:234
Info: 0 out of 21 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 14 third-party GitHubAction dependencies pinned
Info: 0 out of 4 downloadThenRun dependencies pinned
Info: 0 out of 1 npmCommand dependencies pinned