Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/benchmark.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmark.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/benchmark.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/benchmark.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labels.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/labels.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labels.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/labels.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linters.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/linters.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linters.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/linters.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linters.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/linters.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linters.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/linters.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linters.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/linters.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/linters.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/linters.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/new_contributor_pr.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/new_contributor_pr.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_matrix.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/python_matrix.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_matrix.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/python_matrix.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_matrix.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/python_matrix.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule_tests.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/schedule_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule_tests.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/schedule_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule_tests.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/schedule_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule_tests.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/schedule_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule_tests.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/schedule_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule_tests.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/schedule_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule_tests.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/schedule_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule_tests.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/schedule_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule_tests.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/schedule_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule_tests.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/schedule_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule_tests.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/schedule_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule_tests.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/schedule_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedules.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/schedules.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/screenshots.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/screenshots.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/screenshots.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/screenshots.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/screenshots.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/screenshots.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/screenshots.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/screenshots.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/selenium.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/selenium.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/selenium.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/selenium.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/django/django/tests.yml/main?enable=pin
Warn: pipCommand not pinned by hash: .github/workflows/benchmark.yml:27
Warn: pipCommand not pinned by hash: .github/workflows/docs.yml:36
Warn: pipCommand not pinned by hash: .github/workflows/docs.yml:52
Warn: pipCommand not pinned by hash: .github/workflows/linters.yml:32
Warn: pipCommand not pinned by hash: .github/workflows/linters.yml:49
Warn: pipCommand not pinned by hash: .github/workflows/python_matrix.yml:50
Warn: pipCommand not pinned by hash: .github/workflows/python_matrix.yml:51
Warn: pipCommand not pinned by hash: .github/workflows/schedule_tests.yml:132
Warn: pipCommand not pinned by hash: .github/workflows/schedule_tests.yml:133
Warn: pipCommand not pinned by hash: .github/workflows/schedule_tests.yml:177
Warn: pipCommand not pinned by hash: .github/workflows/schedule_tests.yml:178
Warn: pipCommand not pinned by hash: .github/workflows/schedule_tests.yml:54
Warn: pipCommand not pinned by hash: .github/workflows/schedule_tests.yml:55
Warn: pipCommand not pinned by hash: .github/workflows/schedule_tests.yml:62
Warn: npmCommand not pinned by hash: .github/workflows/schedule_tests.yml:78
Warn: pipCommand not pinned by hash: .github/workflows/schedule_tests.yml:96
Warn: pipCommand not pinned by hash: .github/workflows/schedule_tests.yml:97
Warn: pipCommand not pinned by hash: .github/workflows/screenshots.yml:32
Warn: pipCommand not pinned by hash: .github/workflows/screenshots.yml:33
Warn: pipCommand not pinned by hash: .github/workflows/selenium.yml:34
Warn: pipCommand not pinned by hash: .github/workflows/selenium.yml:35
Warn: pipCommand not pinned by hash: .github/workflows/selenium.yml:71
Warn: pipCommand not pinned by hash: .github/workflows/selenium.yml:72
Warn: npmCommand not pinned by hash: .github/workflows/tests.yml:56
Info: 0 out of 42 GitHub-owned GitHubAction dependencies pinned
Info: 2 out of 4 third-party GitHubAction dependencies pinned
Info: 0 out of 22 pipCommand dependencies pinned
Info: 0 out of 2 npmCommand dependencies pinned