Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/ci.yaml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/ci.yaml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/ci.yaml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/ci.yaml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/ci.yaml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/ci.yaml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/ci.yaml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/ci.yaml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yaml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/ci.yaml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/snapshot_release.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/snapshot_release.yaml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/snapshot_release.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/snapshot_release.yaml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snapshot_release.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/snapshot_release.yaml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snapshot_release.yaml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/snapshot_release.yaml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/snapshot_release.yaml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/snapshot_release.yaml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/snapshot_release.yaml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/snapshot_release.yaml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snapshot_release.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/snapshot_release.yaml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tagged_release.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/tagged_release.yaml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tagged_release.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/tagged_release.yaml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tagged_release.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/tagged_release.yaml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tagged_release.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/tagged_release.yaml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tagged_release.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/tagged_release.yaml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tagged_release.yaml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/tagged_release.yaml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tagged_release.yaml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/tagged_release.yaml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tagged_release.yaml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/nut-tree/nut.js/tagged_release.yaml/develop?enable=pin
Info: 0 out of 12 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 12 third-party GitHubAction dependencies pinned