Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yaml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/CI.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yaml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/CI.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yaml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/CI.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yaml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/CI.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yaml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/CI.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yaml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/CI.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/CI.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yaml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/CI.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/CI.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yaml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/CI.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yaml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/CI.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yaml:178: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/CI.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browsers-full.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/browsers-full.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browsers-full.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/browsers-full.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browsers-full.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/browsers-full.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browsers-quick.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/browsers-quick.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browsers-quick.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/browsers-quick.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browsers-quick.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/browsers-quick.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coverage.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/coverage.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coverage.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/coverage.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coverage.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/coverage.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/github-pages.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/github-pages.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/github-pages.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/github-pages.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reproducible.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/reproducible.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reproducible.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/reproducible.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/spider-check.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/spider-check.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/typesense.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/qunitjs/qunit/typesense.yaml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/CI.yaml:73
Warn: npmCommand not pinned by hash: .github/workflows/CI.yaml:109
Warn: npmCommand not pinned by hash: .github/workflows/CI.yaml:147
Warn: npmCommand not pinned by hash: .github/workflows/CI.yaml:185
Warn: npmCommand not pinned by hash: .github/workflows/browsers-full.yaml:38
Warn: npmCommand not pinned by hash: .github/workflows/browsers-quick.yaml:29
Warn: npmCommand not pinned by hash: .github/workflows/coverage.yaml:28
Warn: downloadThenRun not pinned by hash: .github/workflows/coverage.yaml:39
Info: 0 out of 26 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 third-party GitHubAction dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned
Info: 0 out of 7 npmCommand dependencies pinned