Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/ci.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compressed-size.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/compressed-size.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/compressed-size.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/compressed-size.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compressed-size.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/compressed-size.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/compressed-size.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/compressed-size.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coverage.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/coverage.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/coverage.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/coverage.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coverage.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/coverage.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/coverage.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/coverage.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/doc.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/doc.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/doc.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/doc.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/doc.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-basic.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-basic.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-basic.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-basic.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-basic.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-basic.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-basic.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-basic.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-basic.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-basic.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-basic.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-basic.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-basic.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-basic.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-boilerplate.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-boilerplate.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-boilerplate.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-boilerplate.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-boilerplate.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-boilerplate.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-boilerplate.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-boilerplate.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-boilerplate.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-boilerplate.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-boilerplate.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-boilerplate.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-boilerplate.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-boilerplate.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-boilerplate.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-boilerplate.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-boilerplate.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-boilerplate.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-boilerplate.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-boilerplate.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-boilerplate.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-boilerplate.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-mfsu.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-mfsu.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-mfsu.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-mfsu.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-mfsu.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-mfsu.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-mfsu.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-mfsu.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-mfsu.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-mfsu.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-mfsu.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-mfsu.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-mfsu.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-mfsu.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-mfsu.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-mfsu.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-mfsu.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-mfsu.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-mfsu.yml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-mfsu.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-mfsu.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-mfsu.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-qiankun.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-qiankun.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-qiankun.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-qiankun.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-qiankun.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-qiankun.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-qiankun.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-qiankun.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-qiankun.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-qiankun.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-qiankun.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-qiankun.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-vite.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-vite.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-vite.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-vite.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-vite.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-vite.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-vite.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-vite.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-vite.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-vite.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-vite.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/e2e-vite.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/emoji-helper.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/emoji-helper.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-checker.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/issue-checker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-checker.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/issue-checker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-checker.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/issue-checker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-checker.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/issue-checker.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-checker.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/pr-checker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-checker.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/pr-checker.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-checker.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/umijs/umi/pr-checker.yml/master?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:56
Info: 0 out of 27 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 39 third-party GitHubAction dependencies pinned
Info: 0 out of 1 npmCommand dependencies pinned