Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/api-extractor.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/api-extractor.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/api-extractor.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/api-extractor.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/api-extractor.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/api-extractor.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arethetypeswrong.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/arethetypeswrong.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arethetypeswrong.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/arethetypeswrong.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/arethetypeswrong.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/arethetypeswrong.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/change-prerelease-tag.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/change-prerelease-tag.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/change-prerelease-tag.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/change-prerelease-tag.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/change-prerelease-tag.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/change-prerelease-tag.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/change-prerelease-tag.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/change-prerelease-tag.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cleanup-checks.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/cleanup-checks.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cleanup-checks.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/cleanup-checks.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cleanup-checks.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/cleanup-checks.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cleanup-checks.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/cleanup-checks.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cleanup-checks.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/cleanup-checks.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cleanup-checks.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/cleanup-checks.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/close-stale-issues.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/close-stale-issues.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compare-build-output.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/compare-build-output.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compare-build-output.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/compare-build-output.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/compare-build-output.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/compare-build-output.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools-errorcodes.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/devtools-errorcodes.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/devtools-errorcodes.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/devtools-errorcodes.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/exit-prerelease.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/exit-prerelease.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/exit-prerelease.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/exit-prerelease.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/exit-prerelease.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/exit-prerelease.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/lock.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prerelease.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/prerelease.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prerelease.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/prerelease.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prerelease.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/prerelease.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prerelease.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/prerelease.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prerelease.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/prerelease.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prerelease.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/prerelease.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prerelease.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/prerelease.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prerelease.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/prerelease.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pr-releases.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/publish-pr-releases.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pr-releases.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/publish-pr-releases.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-pr-releases.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/publish-pr-releases.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/size-limit.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/size-limit.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/size-limit.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/size-limit.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/size-limit.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/size-limit.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/size-limit.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/size-limit.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snapshot-release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/snapshot-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snapshot-release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/snapshot-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/snapshot-release.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/snapshot-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/snapshot-release.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/snapshot-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snapshot-release.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/snapshot-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snapshot-release.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/snapshot-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snapshot-release.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/snapshot-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snapshot-release.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/snapshot-release.yml/main?enable=pin
Warn: npmCommand not pinned by hash: config/compare-build-output-to.sh:57
Warn: npmCommand not pinned by hash: .github/workflows/change-prerelease-tag.yml:53
Warn: npmCommand not pinned by hash: .github/workflows/exit-prerelease.yml:48
Warn: npmCommand not pinned by hash: .github/workflows/snapshot-release.yml:127
Info: 0 out of 28 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 27 third-party GitHubAction dependencies pinned
Info: 0 out of 4 npmCommand dependencies pinned