Warn: third-party GitHubAction not pinned by hash: .github/workflows/add-to-board.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/add-to-board.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-workflow.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/ci-workflow.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-workflow.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/ci-workflow.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-workflow.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/ci-workflow.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-workflow.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/ci-workflow.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-workflow.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/ci-workflow.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-workflow.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/ci-workflow.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-workflow.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/ci-workflow.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-workflow.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/ci-workflow.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-workflow.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/ci-workflow.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-workflow.yml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/ci-workflow.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-workflow.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/ci-workflow.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:178: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/create-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prepare-release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/prepare-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/repolinter.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/repolinter.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/repolinter.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/repolinter.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/repolinter.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/repolinter.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-pr.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/validate-pr.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-pr.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/validate-pr.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-pr.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/newrelic/node-native-metrics/validate-pr.yml/main?enable=pin
Warn: containerImage not pinned by hash: linux_arm.dockerfile:2
Warn: npmCommand not pinned by hash: .github/workflows/ci-workflow.yml:150
Warn: npmCommand not pinned by hash: .github/workflows/ci-workflow.yml:32
Warn: npmCommand not pinned by hash: .github/workflows/ci-workflow.yml:63
Warn: npmCommand not pinned by hash: .github/workflows/create-release.yml:37
Warn: npmCommand not pinned by hash: .github/workflows/create-release.yml:67
Warn: npmCommand not pinned by hash: .github/workflows/create-release.yml:99
Warn: npmCommand not pinned by hash: .github/workflows/create-release.yml:153
Info: 0 out of 33 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 10 third-party GitHubAction dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned
Info: 0 out of 7 npmCommand dependencies pinned