Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd-docs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/cd-docs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd-docs.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/cd-docs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd-docs.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/cd-docs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-lint.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/ci-lint.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-lint.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/ci-lint.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-lint.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/ci-lint.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-test.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/ci-test.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-test.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/ci-test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-test.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/ci-test.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-test.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/ci-test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/csat.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/csat.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/csat.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/csat.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/stale.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/stale.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/stale.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/wheels.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/wheels.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/wheels.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/wheels.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/wheels.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/wheels.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/wheels.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/wheels.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/tensorflow/tfx/wheels.yml/master?enable=pin
Warn: containerImage not pinned by hash: tfx/examples/containers/workshop/buildfiles/Dockerfile:1: pin your Docker image by updating ubuntu:16.04 to ubuntu:16.04@sha256:1f1a2d56de1d604801a9671f301190704c25d604a416f59e03c04f5c6ffee0d6
Warn: containerImage not pinned by hash: tfx/examples/penguin/experimental/Dockerfile:16
Warn: containerImage not pinned by hash: tfx/tools/docker/Dockerfile:20
Warn: containerImage not pinned by hash: tfx/tools/docker/Dockerfile:64
Warn: containerImage not pinned by hash: tfx/tools/docker/Dockerfile:67
Warn: containerImage not pinned by hash: tfx/tools/docker/base/Dockerfile:19: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214
Warn: pipCommand not pinned by hash: tfx/examples/penguin/experimental/Dockerfile:17
Warn: pipCommand not pinned by hash: tfx/tools/docker/Dockerfile:31
Warn: pipCommand not pinned by hash: tfx/tools/docker/Dockerfile:35-61
Warn: pipCommand not pinned by hash: tfx/tools/docker/Dockerfile:35-61
Warn: pipCommand not pinned by hash: tfx/tools/docker/Dockerfile:89
Warn: pipCommand not pinned by hash: tfx/tools/docker/Dockerfile:94-104
Warn: pipCommand not pinned by hash: tfx/tools/docker/Dockerfile:94-104
Warn: downloadThenRun not pinned by hash: tfx/tools/docker/base/Dockerfile:49-50
Warn: pipCommand not pinned by hash: tfx/tools/docker/base/Dockerfile:49-50
Warn: pipCommand not pinned by hash: tfx/examples/airflow_workshop/taxi/setup/setup_demo.sh:26
Warn: pipCommand not pinned by hash: tfx/examples/airflow_workshop/taxi/setup/setup_demo.sh:29
Warn: pipCommand not pinned by hash: tfx/examples/airflow_workshop/taxi/setup/setup_demo.sh:32
Warn: pipCommand not pinned by hash: tfx/examples/airflow_workshop/taxi/setup/setup_demo.sh:39
Warn: pipCommand not pinned by hash: tfx/examples/containers/workshop/buildfiles/init.sh:44
Warn: pipCommand not pinned by hash: tfx/examples/containers/workshop/buildfiles/init.sh:45
Warn: pipCommand not pinned by hash: tfx/examples/containers/workshop/buildfiles/init.sh:53
Warn: pipCommand not pinned by hash: tfx/examples/containers/workshop/buildfiles/init.sh:57
Warn: pipCommand not pinned by hash: tfx/examples/containers/workshop/buildfiles/init.sh:63
Warn: pipCommand not pinned by hash: tfx/examples/containers/workshop/buildfiles/init.sh:68
Warn: pipCommand not pinned by hash: .github/workflows/cd-docs.yml:46
Warn: pipCommand not pinned by hash: .github/workflows/ci-test.yml:64
Warn: pipCommand not pinned by hash: .github/workflows/ci-test.yml:66
Warn: pipCommand not pinned by hash: .github/workflows/ci-test.yml:67
Warn: pipCommand not pinned by hash: .github/workflows/wheels.yml:27
Warn: pipCommand not pinned by hash: .github/workflows/wheels.yml:65
Warn: pipCommand not pinned by hash: .github/workflows/wheels.yml:85
Warn: pipCommand not pinned by hash: .github/workflows/wheels.yml:96
Info: 0 out of 19 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 5 third-party GitHubAction dependencies pinned
Info: 0 out of 6 containerImage dependencies pinned
Info: 0 out of 26 pipCommand dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned