Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/lint.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/lint.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/nextjs-bundle-analysis.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/nextjs-bundle-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nextjs-bundle-analysis.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/nextjs-bundle-analysis.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/nextjs-bundle-analysis.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/nextjs-bundle-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nextjs-bundle-analysis.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/nextjs-bundle-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nextjs-bundle-analysis.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/nextjs-bundle-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nextjs-bundle-analysis.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/nextjs-bundle-analysis.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/nextjs-bundle-analysis.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/nextjs-bundle-analysis.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/nextjs-bundle-analysis.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/nextjs-bundle-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/shuding/nextra/test.yml/main?enable=pin
Info: 0 out of 10 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 10 third-party GitHubAction dependencies pinned