Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code-quality.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/alewin/useWorker/code-quality.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/code-quality.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/alewin/useWorker/code-quality.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/preview-release.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/alewin/useWorker/preview-release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/preview-release.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/alewin/useWorker/preview-release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/preview-release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/alewin/useWorker/preview-release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alewin/useWorker/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/alewin/useWorker/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/alewin/useWorker/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/alewin/useWorker/release.yml/master?enable=pin
Warn: downloadThenRun not pinned by hash: packages/useWorker/Dockerfile:11-13
Info: 0 out of 5 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 4 third-party GitHubAction dependencies pinned
Info: 1 out of 1 containerImage dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned