Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/package.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/package.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/package.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/package.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/package.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/package.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/package.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/performance.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/performance.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/performance.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/performance.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/performance.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/performance.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/performance.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/performance.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/performance.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/performance.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/performance.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/performance.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/performance.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/website.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/website.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/website.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/website.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/website.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/website.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/website.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/website.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/website.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/website.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/website.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/website.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/website.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/website.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/website.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/website.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/website.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/website.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/website.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/website.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/website.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/website.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/website.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/website.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/website.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/gpbl/react-day-picker/website.yml/main?enable=pin
Info: 0 out of 29 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 11 third-party GitHubAction dependencies pinned