Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/toyobayashi/emnapi/main.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/toyobayashi/emnapi/main.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/toyobayashi/emnapi/main.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/toyobayashi/emnapi/main.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/toyobayashi/emnapi/main.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/toyobayashi/emnapi/main.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/toyobayashi/emnapi/main.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:197: update your workflow using https://app.stepsecurity.io/secureworkflow/toyobayashi/emnapi/main.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/toyobayashi/emnapi/main.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:216: update your workflow using https://app.stepsecurity.io/secureworkflow/toyobayashi/emnapi/main.yml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/main.yml:88
Warn: npmCommand not pinned by hash: .github/workflows/main.yml:89
Warn: npmCommand not pinned by hash: .github/workflows/main.yml:181
Warn: npmCommand not pinned by hash: .github/workflows/main.yml:182
Warn: npmCommand not pinned by hash: .github/workflows/main.yml:226
Warn: npmCommand not pinned by hash: .github/workflows/main.yml:227
Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 3 third-party GitHubAction dependencies pinned
Info: 0 out of 6 npmCommand dependencies pinned