Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/opentelemetry-operations-js/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/opentelemetry-operations-js/ci.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/opentelemetry-operations-js/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/opentelemetry-operations-js/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/opentelemetry-operations-js/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/opentelemetry-operations-js/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/opentelemetry-operations-js/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/opentelemetry-operations-js/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/opentelemetry-operations-js/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/GoogleCloudPlatform/opentelemetry-operations-js/codeql-analysis.yml/main?enable=pin
Warn: containerImage not pinned by hash: e2e-test-server/Dockerfile:17
Warn: containerImage not pinned by hash: e2e-test-server/Dockerfile:21
Warn: containerImage not pinned by hash: e2e-test-server/Dockerfile:29
Warn: containerImage not pinned by hash: samples/instrumentation-quickstart/Dockerfile:1
Warn: containerImage not pinned by hash: samples/instrumentation-quickstart/Dockerfile:8: pin your Docker image by updating node:20-alpine to node:20-alpine@sha256:e6e4bd0369c9bd383fe1fab1b9328988859a456fc1f8a42437f5f8ab9ea646e6
Warn: npmCommand not pinned by hash: e2e-test-server/Dockerfile:24
Warn: npmCommand not pinned by hash: samples/instrumentation-quickstart/Dockerfile:4
Warn: npmCommand not pinned by hash: .github/workflows/ci.yaml:24
Warn: npmCommand not pinned by hash: .github/workflows/ci.yaml:28
Warn: npmCommand not pinned by hash: .github/workflows/ci.yaml:43
Info: 0 out of 9 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 third-party GitHubAction dependencies pinned
Info: 0 out of 5 containerImage dependencies pinned
Info: 0 out of 5 npmCommand dependencies pinned