Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-github-release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/create-github-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-github-release.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/create-github-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-github-release.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/create-github-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/externalNut.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/externalNut.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/externalNut.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/externalNut.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/externalNut.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/externalNut.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/externalNut.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/externalNut.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/onRelease.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/onRelease.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/onRelease.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/onRelease.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/onRelease.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/onRelease.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/onRelease.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/onRelease.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publishDocs.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/publishDocs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publishDocs.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/publishDocs.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publishDocs.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/publishDocs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/tests.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:172: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:173: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/tests.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:176: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/tests.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/tests.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/tests.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/tests.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/jsforce/jsforce/tests.yml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/create-github-release.yml:29
Warn: npmCommand not pinned by hash: .github/workflows/externalNut.yml:91
Warn: npmCommand not pinned by hash: .github/workflows/onRelease.yml:30
Warn: npmCommand not pinned by hash: .github/workflows/onRelease.yml:52
Warn: npmCommand not pinned by hash: .github/workflows/publishDocs.yml:21
Warn: npmCommand not pinned by hash: .github/workflows/tests.yml:112
Warn: npmCommand not pinned by hash: .github/workflows/tests.yml:115
Warn: npmCommand not pinned by hash: .github/workflows/tests.yml:33
Warn: npmCommand not pinned by hash: .github/workflows/tests.yml:36
Warn: npmCommand not pinned by hash: .github/workflows/tests.yml:82
Warn: npmCommand not pinned by hash: .github/workflows/tests.yml:88
Info: 0 out of 20 GitHub-owned GitHubAction dependencies pinned
Info: 7 out of 14 third-party GitHubAction dependencies pinned
Info: 0 out of 11 npmCommand dependencies pinned