Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/native-wsl.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/native-wsl.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-wsl.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/native-wsl.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/native-wsl.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/native-wsl.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/node-4+.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/node-4+.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/node-4+.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/node-4+.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/node-4+.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/node-4+.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/node-4+.yml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/node-4+.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/node-pretest.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/node-pretest.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/node-pretest.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/node-pretest.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/node-pretest.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/node-pretest.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/node-pretest.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/node-pretest.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/packages.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/packages.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/packages.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/packages.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/packages.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/packages.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/packages.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/packages.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/require-allow-edits.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/import-js/eslint-plugin-import/require-allow-edits.yml/main?enable=pin
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:14
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:18
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:23
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:25
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:31
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:34
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:37
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:43
Warn: npmCommand not pinned by hash: tests/dep-time-travel.sh:49
Warn: npmCommand not pinned by hash: .github/workflows/node-pretest.yml:32
Info: 0 out of 5 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 11 third-party GitHubAction dependencies pinned
Info: 0 out of 10 npmCommand dependencies pinned