Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:402: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:407: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:180: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:212: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:219: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:265: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:326: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:349: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:356: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:358: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/CI.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bench.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/bench.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bench.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/bench.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/bench.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/bench.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/bench.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/bench.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/bench.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/bench.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/bench.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/bench.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/ecosystem-ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/ecosystem-ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/lock.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-crates.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-crates.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-crates.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-crates.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-crates.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-crates.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-crates.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-crates.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:395: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:402: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:412: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:524: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:542: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:616: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:632: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:637: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:213: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:221: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:231: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:241: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:246: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:270: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:276: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:294: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:318: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:325: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:333: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:358: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:365: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-package.yml:372: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish-npm-package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/swc-project/swc/stale.yml/main?enable=pin
Warn: downloadThenRun not pinned by hash: .github/workflows/CI.yml:420
Warn: npmCommand not pinned by hash: .github/workflows/CI.yml:440
Warn: npmCommand not pinned by hash: .github/workflows/CI.yml:442
Warn: npmCommand not pinned by hash: .github/workflows/CI.yml:487
Warn: downloadThenRun not pinned by hash: .github/workflows/CI.yml:156
Warn: downloadThenRun not pinned by hash: .github/workflows/CI.yml:379
Warn: downloadThenRun not pinned by hash: .github/workflows/publish-npm-package.yml:267
Warn: npmCommand not pinned by hash: .github/workflows/publish-npm-package.yml:384
Warn: npmCommand not pinned by hash: .github/workflows/publish-npm-package.yml:424
Warn: downloadThenRun not pinned by hash: .github/workflows/publish-npm-package.yml:649
Info: 0 out of 45 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 21 third-party GitHubAction dependencies pinned
Info: 0 out of 5 downloadThenRun dependencies pinned
Info: 0 out of 5 npmCommand dependencies pinned