Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/jupyterhub/jupyterhub/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/jupyterhub/jupyterhub/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/jupyterhub/jupyterhub/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/jupyterhub/jupyterhub/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/support-bot.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/jupyterhub/jupyterhub/support-bot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-docs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/jupyterhub/jupyterhub/test-docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-docs.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/jupyterhub/jupyterhub/test-docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-docs.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/jupyterhub/jupyterhub/test-docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-docs.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/jupyterhub/jupyterhub/test-docs.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-docs.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/jupyterhub/jupyterhub/test-docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-jsx.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/jupyterhub/jupyterhub/test-jsx.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-jsx.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/jupyterhub/jupyterhub/test-jsx.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/jupyterhub/jupyterhub/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/jupyterhub/jupyterhub/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/jupyterhub/jupyterhub/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:261: update your workflow using https://app.stepsecurity.io/secureworkflow/jupyterhub/jupyterhub/test.yml/main?enable=pin
Warn: containerImage not pinned by hash: examples/postgres/db/Dockerfile:1: pin your Docker image by updating postgres:9.3 to postgres:9.3@sha256:3cd40afb5803762170a1149ade6962fe24d405b3ccf2fe499ff1428635520a17
Warn: containerImage not pinned by hash: examples/postgres/hub/Dockerfile:1
Warn: containerImage not pinned by hash: examples/service-fastapi/Dockerfile:1: pin your Docker image by updating quay.io/jupyterhub/jupyterhub to quay.io/jupyterhub/jupyterhub@sha256:57f0c1f09f6cd0f3e22bc049ea5ee06ea43047f0a6df9ec9df01a8c3e3509737
Warn: pipCommand not pinned by hash: examples/postgres/hub/Dockerfile:5-8
Warn: pipCommand not pinned by hash: examples/service-fastapi/Dockerfile:6
Warn: pipCommand not pinned by hash: examples/service-fastapi/Dockerfile:11
Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50
Warn: pipCommand not pinned by hash: .github/workflows/release.yml:51
Warn: pipCommand not pinned by hash: .github/workflows/release.yml:52
Warn: pipCommand not pinned by hash: .github/workflows/release.yml:72
Warn: pipCommand not pinned by hash: .github/workflows/release.yml:86
Warn: pipCommand not pinned by hash: .github/workflows/test-docs.yml:74
Warn: npmCommand not pinned by hash: .github/workflows/test.yml:151
Warn: npmCommand not pinned by hash: .github/workflows/test.yml:152
Warn: pipCommand not pinned by hash: .github/workflows/test.yml:169
Warn: pipCommand not pinned by hash: .github/workflows/test.yml:174
Warn: pipCommand not pinned by hash: .github/workflows/test.yml:176
Warn: pipCommand not pinned by hash: .github/workflows/test.yml:183
Warn: pipCommand not pinned by hash: .github/workflows/test.yml:187
Warn: pipCommand not pinned by hash: .github/workflows/test.yml:190
Warn: pipCommand not pinned by hash: .github/workflows/test.yml:193
Warn: pipCommand not pinned by hash: .github/workflows/test.yml:194
Warn: pipCommand not pinned by hash: .github/workflows/test.yml:197
Warn: pipCommand not pinned by hash: .github/workflows/test.yml:200
Warn: pipCommand not pinned by hash: .github/workflows/test.yml:203
Info: 0 out of 13 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 3 third-party GitHubAction dependencies pinned
Info: 0 out of 3 containerImage dependencies pinned
Info: 1 out of 20 pipCommand dependencies pinned
Info: 1 out of 4 npmCommand dependencies pinned