Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:223: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:290: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:300: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:306: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-title-checker.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pr-title-checker.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:283: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:288: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:295: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:301: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:307: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:373: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:378: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:385: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:391: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:397: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:415: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:420: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:427: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:433: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:439: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:459: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:464: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:471: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:477: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:483: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:207: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:258: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:264: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:327: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:332: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:339: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:345: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:351: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
Warn: containerImage not pinned by hash: docker/builder/Dockerfile:1: pin your Docker image by updating node:dubnium to node:dubnium@sha256:59531d2835edd5161c8f9512f9e095b1836f7a1fcb0ab73e005ec46047384911
Warn: npmCommand not pinned by hash: docker/builder/Dockerfile:12
Warn: npmCommand not pinned by hash: packages/calling/pipeline/setup.sh:14
Warn: downloadThenRun not pinned by hash: run.sh:42
Warn: npmCommand not pinned by hash: run.sh:51
Info: 0 out of 68 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 third-party GitHubAction dependencies pinned
Info: 0 out of 3 npmCommand dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned