Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-github.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/release-github.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-github.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/release-github.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-mvn.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/release-mvn.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-mvn.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/release-mvn.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-mvn.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/release-mvn.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-npm.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/release-npm.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-npm.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/release-npm.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-npm.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/release-npm.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-perl.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/release-perl.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-perl.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/release-perl.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-pypi.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/release-pypi.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-pypi.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/release-pypi.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-pypi.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/release-pypi.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-rubygem.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/release-rubygem.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-rubygem.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/release-rubygem.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-rubygem.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/release-rubygem.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stryker-javascript.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/stryker-javascript.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stryker-javascript.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/stryker-javascript.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stryker-javascript.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/stryker-javascript.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/test-go.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-go.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/test-go.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-java.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/test-java.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-java.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/test-java.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-javascript.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/test-javascript.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-javascript.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/test-javascript.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-perl.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/test-perl.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-perl.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/test-perl.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-python.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/test-python.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-python.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/test-python.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-ruby.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/test-ruby.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-ruby.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/cucumber/tag-expressions/test-ruby.yml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/release-npm.yml:20
Warn: pipCommand not pinned by hash: .github/workflows/release-pypi.yaml:29
Warn: npmCommand not pinned by hash: .github/workflows/stryker-javascript.yml:22
Warn: npmCommand not pinned by hash: .github/workflows/test-javascript.yml:37
Warn: pipCommand not pinned by hash: .github/workflows/test-python.yml:35
Warn: pipCommand not pinned by hash: .github/workflows/test-python.yml:36
Warn: pipCommand not pinned by hash: .github/workflows/test-python.yml:37
Info: 0 out of 22 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 9 third-party GitHubAction dependencies pinned
Info: 0 out of 3 npmCommand dependencies pinned
Info: 0 out of 4 pipCommand dependencies pinned