Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/build.yml:558
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-release.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/auto-release.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/auto-release.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/auto-release.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/auto-release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/auto-release.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:716: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:720: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:248: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:353: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:359: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:363: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:380: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:537: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:541: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:561: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:572: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:645: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:649: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:683: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:687: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:394: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:398: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:402: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:421: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:425: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:429: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:453: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:458: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:462: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:483: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:597: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:601: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:622: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:633: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:221: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:820: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:823: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:827: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:832: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:839: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:881: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:895: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:907: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:273: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:296: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:300: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:318: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:322: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:334: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:755: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:760: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:764: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:772: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:783: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:943: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:946: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:950: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:959: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:1006: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:1016: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/build.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/canary.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/canary.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/canary.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/canary.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/canary.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/canary.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/canary.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/canary.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/canary.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/canary.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/canary.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/canary.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/canary.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/canary.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cleanup-pr-caches.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/cleanup-pr-caches.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clear-cache.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/clear-cache.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clear-cache.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/clear-cache.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/codeql-analysis.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/codeql-analysis.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/codeql-analysis.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/codeql-analysis.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/enforce-license-compliance.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/enforce-license-compliance.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/external-contributors.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/external-contributors.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/external-contributors.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/external-contributors.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/flaky-test-detector.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/flaky-test-detector.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/flaky-test-detector.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/flaky-test-detector.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/flaky-test-detector.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/flaky-test-detector.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/flaky-test-detector.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/flaky-test-detector.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/flaky-test-detector.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/flaky-test-detector.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gitflow-sync-develop.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/gitflow-sync-develop.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/gitflow-sync-develop.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/gitflow-sync-develop.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/gitflow-sync-develop.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/gitflow-sync-develop.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-package-label.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/issue-package-label.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-package-label.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/issue-package-label.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-package-label.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/issue-package-label.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-comment-issues.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/release-comment-issues.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-size-info.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/release-size-info.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/release.yml/develop?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/getsentry/sentry-javascript/release.yml/develop?enable=pin
Warn: containerImage not pinned by hash: dev-packages/e2e-tests/Dockerfile.publish-packages:3
Info: 6 out of 81 GitHub-owned GitHubAction dependencies pinned
Info: 3 out of 30 third-party GitHubAction dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned