Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway-boilerplate/nodejs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway-boilerplate/nodejs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway-boilerplate/nodejs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway-boilerplate/nodejs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway-boilerplate/nodejs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway-boilerplate/nodejs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway-boilerplate/nodejs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway-boilerplate/nodejs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway-boilerplate/schedule.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway-boilerplate/schedule.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway-boilerplate/schedule.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway-boilerplate/schedule.yml/master?enable=pin
Warn: npmCommand not pinned by hash: scripts/prepare.sh:19
Warn: npmCommand not pinned by hash: .github/workflows/nodejs.yml:19
Warn: npmCommand not pinned by hash: .github/workflows/nodejs.yml:37
Warn: npmCommand not pinned by hash: .github/workflows/schedule.yml:23
Info: 0 out of 12 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 4 npmCommand dependencies pinned