Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/ci.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yaml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/ci.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/conformance-test.yaml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/conformance-test.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/conformance-test.yaml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/conformance-test.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issues-no-repro.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/issues-no-repro.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issues-no-repro.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/issues-no-repro.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/response.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/response.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/response.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/response.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/response.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/response.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/response.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/nodejs-storage/response.yaml/main?enable=pin
Warn: npmCommand not pinned by hash: .kokoro/conformance-test.sh:22
Warn: npmCommand not pinned by hash: .kokoro/docs.sh:23
Warn: npmCommand not pinned by hash: .kokoro/lint.sh:23
Warn: npmCommand not pinned by hash: .kokoro/lint.sh:29
Warn: npmCommand not pinned by hash: .kokoro/publish.sh:29
Warn: npmCommand not pinned by hash: .kokoro/release/docs-devsite.sh:27
Warn: npmCommand not pinned by hash: .kokoro/release/docs-devsite.sh:28
Warn: npmCommand not pinned by hash: .kokoro/release/docs.sh:27
Warn: npmCommand not pinned by hash: .kokoro/release/docs.sh:31
Warn: npmCommand not pinned by hash: .kokoro/samples-test.sh:35
Warn: npmCommand not pinned by hash: .kokoro/samples-test.sh:40
Warn: downloadThenRun not pinned by hash: .kokoro/setup-vars.sh:30
Warn: downloadThenRun not pinned by hash: .kokoro/setup-vars.sh:32
Warn: downloadThenRun not pinned by hash: .kokoro/setup-vars.sh:38
Warn: npmCommand not pinned by hash: .kokoro/system-test.sh:40
Warn: npmCommand not pinned by hash: .kokoro/test.sh:23
Warn: npmCommand not pinned by hash: .github/workflows/ci.yaml:23
Warn: npmCommand not pinned by hash: .github/workflows/ci.yaml:26
Warn: npmCommand not pinned by hash: .github/workflows/ci.yaml:48
Warn: npmCommand not pinned by hash: .github/workflows/ci.yaml:57
Warn: npmCommand not pinned by hash: .github/workflows/conformance-test.yaml:17
Info: 0 out of 16 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 third-party GitHubAction dependencies pinned
Info: 0 out of 18 npmCommand dependencies pinned
Info: 0 out of 3 downloadThenRun dependencies pinned