Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/broadcast-channel/main.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/broadcast-channel/main.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/broadcast-channel/main.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/broadcast-channel/main.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/broadcast-channel/main.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/broadcast-channel/main.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/broadcast-channel/main.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/broadcast-channel/main.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/broadcast-channel/main.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/broadcast-channel/main.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/broadcast-channel/main.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/broadcast-channel/main.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/broadcast-channel/main.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prevent-commit-to-generated.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/pubkey/broadcast-channel/prevent-commit-to-generated.yml/master?enable=pin
Warn: npmCommand not pinned by hash: test/scripts/windows.sh:2
Warn: npmCommand not pinned by hash: test/scripts/windows.sh:3
Warn: npmCommand not pinned by hash: test/scripts/windows.sh:4
Warn: npmCommand not pinned by hash: test/scripts/windows.sh:5
Warn: npmCommand not pinned by hash: test/scripts/windows.sh:6
Warn: npmCommand not pinned by hash: test/scripts/windows.sh:7
Warn: npmCommand not pinned by hash: test/scripts/windows.sh:8
Warn: npmCommand not pinned by hash: test/scripts/windows.sh:9
Warn: npmCommand not pinned by hash: test/scripts/windows.sh:10
Warn: npmCommand not pinned by hash: test/scripts/windows.sh:11
Warn: npmCommand not pinned by hash: .github/workflows/main.yml:58
Warn: npmCommand not pinned by hash: .github/workflows/main.yml:128
Warn: npmCommand not pinned by hash: .github/workflows/main.yml:164
Warn: npmCommand not pinned by hash: .github/workflows/main.yml:185
Info: 0 out of 11 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 3 third-party GitHubAction dependencies pinned
Info: 0 out of 14 npmCommand dependencies pinned