Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/benchmark.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/benchmark.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/benchmark.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmark.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/benchmark.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-bun-image.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-bun-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-bun-image.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-bun-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-bun-image.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-bun-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-bun-image.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-bun-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-bun-image.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-bun-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-bun-image.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-bun-image.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-nginx-image.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-nginx-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-nginx-image.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-nginx-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-nginx-image.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-nginx-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-nginx-image.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-nginx-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-nginx-image.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-nginx-image.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-node-image.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-node-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-node-image.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-node-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-node-image.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-node-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-node-image.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-node-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-node-image.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-node-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-node-image.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-node-image.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-vscode-image.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-vscode-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-vscode-image.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-vscode-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-vscode-image.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-vscode-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-vscode-image.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-vscode-image.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-vscode-image.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/build-vscode-image.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bun-unit.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/bun-unit.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/bun-unit.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/bun-unit.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/docs.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/docs.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/lint.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/unit.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/unit.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/unit.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/unit.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/unit.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/unit.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/unit.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/faasjs/faasjs/unit.yml/main?enable=pin
Warn: containerImage not pinned by hash: images/bun/Dockerfile:1: pin your Docker image by updating oven/bun:alpine to oven/bun:alpine@sha256:aa3c07503fe8097fd185aa1fa7a55ec99c1d9041586b0efb1ed6fc0bd6923803
Warn: containerImage not pinned by hash: images/bun/debian.Dockerfile:1: pin your Docker image by updating oven/bun to oven/bun@sha256:4ca745e33ed5b5b5233d3e1ed8d5e63dafd519d2adcfc37f65218ece032824f3
Warn: containerImage not pinned by hash: images/nginx/Dockerfile:1: pin your Docker image by updating alpine to alpine@sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4a
Warn: containerImage not pinned by hash: images/node/Dockerfile:1: pin your Docker image by updating node:lts-alpine to node:lts-alpine@sha256:b64ced2e7cd0a4816699fe308ce6e8a08ccba463c757c00c14cd372e3d2c763e
Warn: containerImage not pinned by hash: images/node/debian.Dockerfile:1: pin your Docker image by updating node:lts to node:lts@sha256:5c76d05034644fa8ecc9c2aa84e0a83cd981d0ef13af5455b87b9adf5b216561
Warn: containerImage not pinned by hash: images/vscode/Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/devcontainers/base:ubuntu to mcr.microsoft.com/devcontainers/base:ubuntu@sha256:003d94e845d73ea81a9245edd90a4edf852ff19e5b9a7992692538ba6295a9be
Warn: npmCommand not pinned by hash: images/node/Dockerfile:6
Warn: npmCommand not pinned by hash: images/node/debian.Dockerfile:10
Warn: downloadThenRun not pinned by hash: images/vscode/Dockerfile:15
Warn: npmCommand not pinned by hash: images/vscode/Dockerfile:39
Warn: downloadThenRun not pinned by hash: images/vscode/Dockerfile:51
Warn: npmCommand not pinned by hash: .github/workflows/unit.yml:56
Info: 0 out of 16 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 26 third-party GitHubAction dependencies pinned
Info: 0 out of 6 containerImage dependencies pinned
Info: 2 out of 6 npmCommand dependencies pinned
Info: 0 out of 2 downloadThenRun dependencies pinned