Gathering detailed insights and metrics for @webiny/api-form-builder
Gathering detailed insights and metrics for @webiny/api-form-builder
Open-source serverless enterprise CMS. Includes a headless CMS, page builder, form builder, and file manager. Easy to customize and expand. Deploys to AWS.
Installations
npm install @webiny/api-form-builderDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS
Node Version
20.19.2
NPM Version
lerna/8.1.2/node@v20.19.2+x64 (linux)
Releases
1,849
Languages
5
TypeScript
JavaScript
CSS
SCSS
HTML
TypeScript (84.65%)
JavaScript (15.05%)
CSS (0.14%)
SCSS (0.14%)
HTML (0.02%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
NOASSERTION License
7,625 Stars
16,856 Commits
631 Forks
71 Watchers
107 Branches
73 Contributors
Updated on Jul 13, 2025
Maintainers
1
Package Meta Information
Latest Version
5.43.2
Package Id
@webiny/api-form-builder@5.43.2
Unpacked Size
396.85 kB
Size
69.50 kB
File Count
132
NPM Version
lerna/8.1.2/node@v20.19.2+x64 (linux)
Node Version
20.19.2
Published on
Jun 23, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
21
@webiny/api@webiny/api-file-manager@webiny/api-i18n@webiny/api-mailer@webiny/api-page-builder@webiny/api-security@webiny/api-tenancy@webiny/error@webiny/handler@webiny/handler-aws@webiny/handler-graphql@webiny/plugins@webiny/pubsub@webiny/utils@webiny/validationdate-fnsjson2csvlodashnode-fetchslugifyzod
@webiny/api-form-builder
The API for the Webiny Forms (@webiny/app-form-builder) app.
Install
npm install --save @webiny/api-form-builder
Or if you prefer yarn:
yarn add @webiny/api-form-builder
No vulnerabilities found.
Reason
30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
SAST tool detected but not run on all commits
Details
- Info: SAST configuration detected: CodeQL
- Warn: 12 commits out of 21 are checked with a SAST tool
Reason
Found 8/30 approved changesets -- score normalized to 2
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/labeler.yml:8
- Warn: no topLevel permission defined: .github/workflows/chromaticStorybook.yml:1
- Warn: no topLevel permission defined: .github/workflows/cleanup.yml:1
- Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1
- Warn: no topLevel permission defined: .github/workflows/labeler.yml:1
- Warn: no topLevel permission defined: .github/workflows/pullRequests.yml:1
- Warn: no topLevel permission defined: .github/workflows/pullRequestsCommandCypress.yml:1
- Warn: no topLevel permission defined: .github/workflows/pullRequestsCommandJest.yml:1
- Warn: no topLevel permission defined: .github/workflows/pushDev.yml:1
- Warn: no topLevel permission defined: .github/workflows/pushNext.yml:1
- Warn: no topLevel permission defined: .github/workflows/pushStable.yml:1
- Warn: no topLevel permission defined: .github/workflows/rebuildGlobalCacheDev.yml:1
- Warn: no topLevel permission defined: .github/workflows/rebuildGlobalCacheNext.yml:1
- Warn: no topLevel permission defined: .github/workflows/release.yml:1
- Warn: no topLevel permission defined: .github/workflows/versionApproval.yml:1
- Info: no jobLevel write permissions found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chromaticStorybook.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/chromaticStorybook.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chromaticStorybook.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/chromaticStorybook.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chromaticStorybook.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/chromaticStorybook.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/chromaticStorybook.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/chromaticStorybook.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/chromaticStorybook.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/chromaticStorybook.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/cleanup.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/cleanup.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cleanup.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/cleanup.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/codeql-analysis.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/codeql-analysis.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/codeql-analysis.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/codeql-analysis.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labeler.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/labeler.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labeler.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/labeler.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:263: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:680: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:684: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:688: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:691: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:695: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:207: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:211: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:232: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:235: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:238: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:303: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:306: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:309: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:313: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:423: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:426: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:429: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:433: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:455: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:458: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:548: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:552: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:556: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:559: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:563: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:335: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:338: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:587: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:590: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pullRequests.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequests.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:623: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:626: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:817: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:820: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:828: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:832: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:429: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:433: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:437: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:445: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:449: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:477: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:500: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:577: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:580: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:588: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:592: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:669: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:673: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:677: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:685: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:689: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:717: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:740: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:194: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:202: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:210: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:214: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:242: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:265: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:338: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:341: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:349: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:353: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:383: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandCypress.yml:386: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandCypress.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:345: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:349: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:353: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:356: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:360: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:444: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:448: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:452: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:455: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:459: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:163: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:173: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:253: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:256: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:263: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pullRequestsCommandJest.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pullRequestsCommandJest.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:274: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:280: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:503: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:506: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:675: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:678: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:681: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:685: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:751: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pushDev.yml:755: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:759: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:763: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:767: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:795: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:818: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:893: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:896: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:899: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:903: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:1111: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:1114: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:1117: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:1121: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:366: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pushDev.yml:370: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:374: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:377: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:381: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:465: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pushDev.yml:469: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:473: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:476: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:480: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:713: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:716: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:969: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pushDev.yml:973: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:977: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:981: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:985: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:1013: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:1036: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:190: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:194: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:538: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pushDev.yml:542: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:546: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:550: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:554: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:582: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:605: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:931: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushDev.yml:934: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:274: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:280: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:465: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pushNext.yml:469: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:473: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:476: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:480: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:713: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:716: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:751: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pushNext.yml:755: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:759: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:763: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:767: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:795: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:818: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:190: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:194: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:675: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:678: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:681: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:685: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:893: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:896: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:899: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:903: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:1111: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:1114: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:1117: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:1121: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:1160: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:1163: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:1166: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:1170: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:366: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pushNext.yml:370: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:374: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:377: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:381: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:931: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:934: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:969: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pushNext.yml:973: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:977: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:981: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:985: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:1013: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:1036: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:503: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:506: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:538: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pushNext.yml:542: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:546: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:550: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:554: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:582: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushNext.yml:605: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushStable.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushStable.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushStable.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushStable.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushStable.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushStable.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushStable.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushStable.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushStable.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushStable.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushStable.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushStable.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushStable.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushStable.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushStable.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushStable.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushStable.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushStable.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushStable.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushStable.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushStable.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushStable.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushStable.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushStable.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushStable.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushStable.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushStable.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushStable.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushStable.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushStable.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pushStable.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/pushStable.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rebuildGlobalCacheDev.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/rebuildGlobalCacheDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rebuildGlobalCacheDev.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/rebuildGlobalCacheDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rebuildGlobalCacheDev.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/rebuildGlobalCacheDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rebuildGlobalCacheDev.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/rebuildGlobalCacheDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rebuildGlobalCacheDev.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/rebuildGlobalCacheDev.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rebuildGlobalCacheNext.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/rebuildGlobalCacheNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rebuildGlobalCacheNext.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/rebuildGlobalCacheNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rebuildGlobalCacheNext.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/rebuildGlobalCacheNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rebuildGlobalCacheNext.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/rebuildGlobalCacheNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rebuildGlobalCacheNext.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/rebuildGlobalCacheNext.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/release.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/release.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/versionApproval.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/versionApproval.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/versionApproval.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/versionApproval.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/versionApproval.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/versionApproval.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/versionApproval.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/versionApproval.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/versionApproval.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/versionApproval.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/versionApproval.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/versionApproval.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/versionApproval.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/versionApproval.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/versionApproval.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/webiny/webiny-js/versionApproval.yml/next?enable=pin
- Info: 0 out of 312 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 28 third-party GitHubAction dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
13 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
- Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
- Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
- Warn: Project is vulnerable to: GHSA-3x59-vrmc-5mx6
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-fx46-whrj-73v5
- Warn: Project is vulnerable to: GHSA-pppg-cpfq-h7wr
- Warn: Project is vulnerable to: GHSA-hw8r-x6gr-5gjp
- Warn: Project is vulnerable to: GHSA-h7cp-r72f-jxh6
- Warn: Project is vulnerable to: GHSA-v62p-rq8g-8h59
- Warn: Project is vulnerable to: GHSA-x5gf-qvw8-r2rm
- Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v
- Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h
Score
5.2
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More