Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/daily.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/daily.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/daily.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/daily.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/daily.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/daily.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/daily.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/daily.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/daily.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/daily.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/daily.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/daily.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/daily.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/daily.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/daily.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/daily.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/daily.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/daily.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/meta_tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/meta_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/meta_tests.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/meta_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/meta_tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/meta_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/meta_tests.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/meta_tests.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/meta_tests.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/meta_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/meta_tests.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/meta_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/meta_tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/meta_tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mypy_primer.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/mypy_primer.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mypy_primer.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/mypy_primer.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mypy_primer.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/mypy_primer.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mypy_primer.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/mypy_primer.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mypy_primer.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/mypy_primer.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mypy_primer_comment.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/mypy_primer_comment.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mypy_primer_comment.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/mypy_primer_comment.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stubsabot.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/stubsabot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stubsabot.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/stubsabot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stubsabot.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/stubsabot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stubtest_stdlib.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/stubtest_stdlib.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stubtest_stdlib.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/stubtest_stdlib.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stubtest_third_party.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/stubtest_third_party.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stubtest_third_party.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/stubtest_third_party.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:163: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:176: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:180: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/python/typeshed/tests.yml/main?enable=pin
Warn: pipCommand not pinned by hash: .github/workflows/daily.yml:53
Warn: pipCommand not pinned by hash: .github/workflows/daily.yml:76
Warn: chocoCommand not pinned by hash: .github/workflows/daily.yml:93
Warn: downloadThenRun not pinned by hash: .github/workflows/meta_tests.yml:43
Warn: downloadThenRun not pinned by hash: .github/workflows/meta_tests.yml:60
Warn: downloadThenRun not pinned by hash: .github/workflows/meta_tests.yml:77
Warn: pipCommand not pinned by hash: .github/workflows/mypy_primer.yml:37
Warn: downloadThenRun not pinned by hash: .github/workflows/stubsabot.yml:31
Warn: pipCommand not pinned by hash: .github/workflows/stubtest_stdlib.yml:49
Warn: pipCommand not pinned by hash: .github/workflows/stubtest_third_party.yml:51
Warn: chocoCommand not pinned by hash: .github/workflows/stubtest_third_party.yml:82
Warn: downloadThenRun not pinned by hash: .github/workflows/tests.yml:34
Warn: downloadThenRun not pinned by hash: .github/workflows/tests.yml:73
Warn: downloadThenRun not pinned by hash: .github/workflows/tests.yml:106
Info: 0 out of 41 GitHub-owned GitHubAction dependencies pinned
Info: 1 out of 9 third-party GitHubAction dependencies pinned
Info: 0 out of 5 pipCommand dependencies pinned
Info: 0 out of 2 chocoCommand dependencies pinned
Info: 0 out of 7 downloadThenRun dependencies pinned