Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-api-nodejs-client/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-api-nodejs-client/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-api-nodejs-client/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-api-nodejs-client/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issues-no-repro.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-api-nodejs-client/issues-no-repro.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issues-no-repro.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-api-nodejs-client/issues-no-repro.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/response.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-api-nodejs-client/response.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/response.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-api-nodejs-client/response.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/response.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-api-nodejs-client/response.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/response.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-api-nodejs-client/response.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-apis.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-api-nodejs-client/update-apis.yaml/main?enable=pin
Warn: npmCommand not pinned by hash: .kokoro/docs.sh:23
Warn: npmCommand not pinned by hash: .kokoro/lint.sh:23
Warn: npmCommand not pinned by hash: .kokoro/lint.sh:29
Warn: npmCommand not pinned by hash: .kokoro/release/docs-devsite.sh:27
Warn: npmCommand not pinned by hash: .kokoro/release/docs-devsite.sh:28
Warn: npmCommand not pinned by hash: .kokoro/release/docs.sh:27
Warn: npmCommand not pinned by hash: .kokoro/release/docs.sh:31
Warn: npmCommand not pinned by hash: .kokoro/samples-test.sh:35
Warn: npmCommand not pinned by hash: .kokoro/samples-test.sh:40
Warn: npmCommand not pinned by hash: .kokoro/system-test.sh:34
Warn: npmCommand not pinned by hash: .kokoro/test.sh:23
Warn: npmCommand not pinned by hash: .github/workflows/ci.yaml:24
Warn: npmCommand not pinned by hash: .github/workflows/ci.yaml:27
Warn: npmCommand not pinned by hash: .github/workflows/ci.yaml:49
Warn: npmCommand not pinned by hash: .github/workflows/ci.yaml:58
Warn: npmCommand not pinned by hash: .github/workflows/update-apis.yaml:20
Info: 4 out of 15 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 16 npmCommand dependencies pinned