Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:213: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:224: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:250: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:276: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:312: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:320: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:328: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:351: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:359: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:370: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:381: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:407: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:421: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:462: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:474: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/closed-issue-message.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/closed-issue-message.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/handle-stale-discussions.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/handle-stale-discussions.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-regression-labeler.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/issue-regression-labeler.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/stale-issue.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/aws/aws-iot-device-sdk-python-v2/stale-issue.yml/main?enable=pin
Warn: pipCommand not pinned by hash: codebuild/cd/test-version-exists.sh:36
Warn: pipCommand not pinned by hash: codebuild/samples/setup-linux.sh:12
Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:405
Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:418
Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:419
Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:467
Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:468
Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:104
Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:160
Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:173
Warn: pipCommand not pinned by hash: .github/workflows/ci.yml:208
Warn: pipCommand not pinned by hash: .github/workflows/release.yml:47
Warn: pipCommand not pinned by hash: .github/workflows/release.yml:48
Info: 0 out of 4 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 31 third-party GitHubAction dependencies pinned
Info: 0 out of 13 pipCommand dependencies pinned