Info: Possibly incomplete results: error parsing shell code: parameter expansion requires a literal: .devcontainer/scripts/zsh_dotnet_completion.sh:0
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:190: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:206: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:214: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:224: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:254: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/build.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commands.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/commands.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commands.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/commands.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commands.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/commands.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commands.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/commands.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commands.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/commands.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/commands.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/commands.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:152: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:192: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:216: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:220: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:232: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:241: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:243: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:248: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:254: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:272: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:274: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-pypi.yml:279: update your workflow using https://app.stepsecurity.io/secureworkflow/fable-compiler/Fable/publish-pypi.yml/main?enable=pin
Warn: containerImage not pinned by hash: .devcontainer/Dockerfile:21: pin your Docker image by updating mcr.microsoft.com/devcontainers/base:debian to mcr.microsoft.com/devcontainers/base:debian@sha256:da67c59f82e057e0ccb81ec7d13fb50464c26f477638018e6de1b2623a008a3a
Warn: downloadThenRun not pinned by hash: .devcontainer/Dockerfile:40
Warn: downloadThenRun not pinned by hash: .devcontainer/Dockerfile:63
Warn: downloadThenRun not pinned by hash: .devcontainer/Dockerfile:76
Warn: downloadThenRun not pinned by hash: .devcontainer/Dockerfile:84
Warn: downloadThenRun not pinned by hash: .devcontainer/Dockerfile:89
Warn: nugetCommand not pinned by hash: .github/workflows/build.yml:45: pin your dependecies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)
Info: 0 out of 61 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 11 third-party GitHubAction dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned
Info: 0 out of 5 downloadThenRun dependencies pinned
Info: 0 out of 1 nugetCommand dependencies pinned