Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/timocov/dts-bundle-generator/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/timocov/dts-bundle-generator/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/timocov/dts-bundle-generator/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/timocov/dts-bundle-generator/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/timocov/dts-bundle-generator/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/timocov/dts-bundle-generator/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/timocov/dts-bundle-generator/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/timocov/dts-bundle-generator/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/timocov/dts-bundle-generator/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/timocov/dts-bundle-generator/release.yml/master?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:23
Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:35
Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:36
Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:48
Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:62
Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:63
Warn: npmCommand not pinned by hash: .github/workflows/release.yml:20
Info: 0 out of 10 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 7 npmCommand dependencies pinned