Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-gh-release.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-gh-release.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-gh-release.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-gh-release.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-gh-release.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-gh-release.yml/development?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-gh-release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-gh-release.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:178: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:202: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-push-or-pull.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-push-or-pull.yml/development?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-release.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-release.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-release.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-release.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-release.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-release.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-release.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-release.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-release.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-release.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-release.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-release.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-release.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-release.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-release.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-release.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-release.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-release.yml/development?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-release.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-release.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-release.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-release.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-release.yml/development?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/on-release.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-release.yml/development?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/on-release.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/valor-software/ngx-bootstrap/on-release.yml/development?enable=pin
Warn: containerImage not pinned by hash: _root/Dockerfile:1: pin your Docker image by updating node to node@sha256:e7db48bc35ee8d2e8d1511dfe779d78076966bd101ab074ea2858da8d59efb7f
Warn: npmCommand not pinned by hash: _root/Dockerfile:11
Warn: npmCommand not pinned by hash: _root/scripts/ci/npm-ng-latest.sh:3
Warn: npmCommand not pinned by hash: _root/scripts/ci/npm-ng-min.sh:3
Warn: npmCommand not pinned by hash: _root/scripts/ci/npm-ng-next.sh:1
Info: 0 out of 34 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 7 third-party GitHubAction dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned
Info: 2 out of 6 npmCommand dependencies pinned