Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/benchmark.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/benchmark.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/benchmark.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/lock.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/nodejs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/nodejs.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/nodejs.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/nodejs.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/nodejs.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/nodejs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/precheck.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/precheck.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/precheck.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/precheck.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/precheck.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/precheck.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presite.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/presite.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presite.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/presite.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/site.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/site.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/site.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/site.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/site.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/site.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/site.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/site.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/site.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/midway/site.yml/main?enable=pin
Warn: npmCommand not pinned by hash: benchmark/ready.sh:5
Warn: npmCommand not pinned by hash: benchmark/ready.sh:15
Warn: npmCommand not pinned by hash: scripts/install_npm.sh:10
Warn: npmCommand not pinned by hash: .github/workflows/benchmark.yml:49
Warn: npmCommand not pinned by hash: .github/workflows/benchmark.yml:51
Warn: npmCommand not pinned by hash: .github/workflows/nodejs.yml:99
Warn: npmCommand not pinned by hash: .github/workflows/nodejs.yml:99
Warn: npmCommand not pinned by hash: .github/workflows/precheck.yml:89
Warn: npmCommand not pinned by hash: .github/workflows/presite.yml:28
Warn: npmCommand not pinned by hash: .github/workflows/presite.yml:30
Warn: npmCommand not pinned by hash: .github/workflows/site.yml:28
Info: 0 out of 11 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 7 third-party GitHubAction dependencies pinned
Info: 0 out of 11 npmCommand dependencies pinned