Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/php.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/php.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:164: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:176: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-js-only.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release-js-only.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-js-only.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release-js-only.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-js-only.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release-js-only.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-js-only.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release-js-only.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-js-only.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release-js-only.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-js-only.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release-js-only.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release.yml/master?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214
Warn: pipCommand not pinned by hash: Dockerfile:27
Warn: pipCommand not pinned by hash: Dockerfile:28
Warn: pipCommand not pinned by hash: Dockerfile:29
Warn: pipCommand not pinned by hash: Dockerfile:30
Warn: pipCommand not pinned by hash: Dockerfile:31
Warn: pipCommand not pinned by hash: Dockerfile:32
Warn: pipCommand not pinned by hash: Dockerfile:33
Warn: downloadThenRun not pinned by hash: Dockerfile:37-40
Warn: npmCommand not pinned by hash: Dockerfile:42
Warn: pipCommand not pinned by hash: Dockerfile:45-47
Warn: npmCommand not pinned by hash: utils/package-test.sh:7
Warn: npmCommand not pinned by hash: .github/workflows/go-app.yml:37
Warn: pipCommand not pinned by hash: .github/workflows/python.yml:40
Warn: pipCommand not pinned by hash: .github/workflows/python.yml:188
Warn: pipCommand not pinned by hash: .github/workflows/release.yml:63
Warn: pipCommand not pinned by hash: .github/workflows/release.yml:65
Info: 0 out of 62 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 6 third-party GitHubAction dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned
Info: 0 out of 12 pipCommand dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned
Info: 12 out of 15 npmCommand dependencies pinned