{"date":"2026-08-17","repo":{"name":"github.com/FedML-AI/FedML","commit":"03e11dfee69a458a9820ec4e05b531a5f935eb2b"},"scorecard":{"version":"v5.5.1-0.20260815060127-d1fab88f5463","commit":"d1fab88f54636ff366076edfc5c239f97b3c8e66"},"score":4,"checks":[{"name":"Code-Review","score":9,"reason":"Found 13/14 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:33","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:34","Warn: no topLevel permission defined: .github/workflows/build_wheels_and_dev.yml:1","Warn: no topLevel permission defined: .github/workflows/build_wheels_and_releases.yml:1","Warn: no topLevel permission defined: .github/workflows/build_wheels_and_test.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/pylint.yml:1","Warn: no topLevel permission defined: .github/workflows/smoke_test_cross_device_mnn_server_linux.yml:1","Warn: no topLevel permission defined: .github/workflows/smoke_test_cross_silo_fedavg_attack_linux.yml:1","Warn: no topLevel permission defined: .github/workflows/smoke_test_cross_silo_fedavg_cdp_linux.yml:1","Warn: no topLevel permission defined: .github/workflows/smoke_test_cross_silo_fedavg_defense_linux.yml:1","Warn: no topLevel permission defined: .github/workflows/smoke_test_cross_silo_fedavg_ldp_linux.yml:1","Warn: no topLevel permission defined: .github/workflows/smoke_test_cross_silo_ho_linux.yml:1","Warn: no topLevel permission defined: .github/workflows/smoke_test_cross_silo_ho_win.yml:1","Warn: no topLevel permission defined: .github/workflows/smoke_test_cross_silo_lightsecagg_linux.yml:1","Warn: no topLevel permission defined: .github/workflows/smoke_test_cross_silo_lightsecagg_win.yml:1","Warn: no topLevel permission defined: .github/workflows/smoke_test_flow_linux.yml:1","Warn: no topLevel permission defined: .github/workflows/smoke_test_ml_engines_linux_jax.yml:1","Warn: no topLevel permission defined: .github/workflows/smoke_test_ml_engines_linux_mxnet.yml:1","Warn: no topLevel permission defined: .github/workflows/smoke_test_ml_engines_linux_tf.yml:1","Warn: no topLevel permission defined: .github/workflows/smoke_test_ml_engines_win.yml:1","Warn: topLevel permissions set to 'write-all': .github/workflows/smoke_test_pip_cli_sp_linux.yml:22"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#branch-protection"}},{"name":"Binary-Artifacts","score":4,"reason":"binaries present in source code","details":["Warn: binary detected: android/fedmlsdk/MobileNN/test/src/cpp/main_mnn_train.out:1","Warn: binary detected: android/fedmlsdk/libs/MNN/arm64-v8a/libMNN.so:1","Warn: binary detected: android/fedmlsdk/libs/MNN/arm64-v8a/libMNNTrain.so:1","Warn: binary detected: android/fedmlsdk/libs/MNN/arm64-v8a/libMNN_Express.so:1","Warn: binary detected: android/fedmlsdk/libs/MNN/arm64-v8a/libMobileNN.so:1","Warn: binary detected: android/gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#fuzzing"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#packaging"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_device_mnn_server_linux.yml:66","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_attack_linux.yml:67","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_attack_linux.yml:75","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_attack_linux.yml:85","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_attack_linux.yml:95","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_attack_linux.yml:105","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_attack_linux.yml:115","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_cdp_linux.yml:67","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_cdp_linux.yml:75","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_cdp_linux.yml:85","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_cdp_linux.yml:95","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_defense_linux.yml:67","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_defense_linux.yml:75","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_defense_linux.yml:85","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_defense_linux.yml:95","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_defense_linux.yml:105","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_defense_linux.yml:115","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_ldp_linux.yml:67","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_ldp_linux.yml:75","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_ldp_linux.yml:85","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_fedavg_ldp_linux.yml:95","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_ho_linux.yml:67","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_ho_linux.yml:75","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_ho_linux.yml:85","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_ho_linux.yml:95","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_lightsecagg_linux.yml:67","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_lightsecagg_linux.yml:75","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_lightsecagg_linux.yml:85","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_cross_silo_lightsecagg_linux.yml:95","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_flow_linux.yml:57","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_flow_linux.yml:65","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_flow_linux.yml:75","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_flow_linux.yml:85","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_ml_engines_linux_jax.yml:67","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_ml_engines_linux_jax.yml:76","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_ml_engines_linux_jax.yml:86","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_ml_engines_linux_jax.yml:96","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_ml_engines_linux_mxnet.yml:67","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_ml_engines_linux_mxnet.yml:77","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_ml_engines_linux_mxnet.yml:87","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_ml_engines_linux_mxnet.yml:97","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_ml_engines_linux_tf.yml:67","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_ml_engines_linux_tf.yml:76","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_ml_engines_linux_tf.yml:86","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_ml_engines_linux_tf.yml:96","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_pip_cli_sp_linux.yml:68","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_pip_cli_sp_linux.yml:76","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_pip_cli_sp_linux.yml:83","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_pip_cli_sp_linux.yml:91","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_pip_cli_sp_linux.yml:98","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_pip_cli_sp_linux.yml:105","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_pip_cli_sp_linux.yml:112","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_pip_cli_sp_linux.yml:119","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_pip_cli_sp_linux.yml:126","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_security.yml:68","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/smoke_test_simulation_mpi_linux.yml:72","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels_and_dev.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_dev.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels_and_dev.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_dev.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels_and_dev.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_dev.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels_and_dev.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_dev.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels_and_dev.yml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_dev.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_wheels_and_dev.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_dev.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels_and_releases.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_releases.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels_and_releases.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_releases.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels_and_releases.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_releases.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels_and_releases.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_releases.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels_and_releases.yml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_releases.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_wheels_and_releases.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_releases.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels_and_test.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels_and_test.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels_and_test.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels_and_test.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels_and_test.yml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_test.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_wheels_and_test.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/build_wheels_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/FedML-AI/FedML/codeql-analysis.yml/master?enable=pin","Warn: containerImage not pinned by hash: devops/dockerfile/client-agent/Dockerfile:4","Warn: containerImage not pinned by hash: devops/dockerfile/device-image/Dockerfile-Base:5: pin your Docker image by updating docker.io/fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel to docker.io/fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel@sha256:37f94e213cbb17c46127120cf56d52b810d38546329dc9b53d82a713dcac06e5","Warn: containerImage not pinned by hash: devops/dockerfile/device-image/Dockerfile-Dev:4: pin your Docker image by updating docker.io/fedml/fedml-device-image:base to docker.io/fedml/fedml-device-image:base@sha256:4cec8991f77878d1246e387f1efeb3667a452bfcf586bf02258434ffc7e62421","Warn: containerImage not pinned by hash: devops/dockerfile/device-image/Dockerfile-Local:4: pin your Docker image by updating docker.io/fedml/fedml-device-image:base to docker.io/fedml/fedml-device-image:base@sha256:4cec8991f77878d1246e387f1efeb3667a452bfcf586bf02258434ffc7e62421","Warn: containerImage not pinned by hash: devops/dockerfile/device-image/Dockerfile-Release:4: pin your Docker image by updating docker.io/fedml/fedml-device-image:base to docker.io/fedml/fedml-device-image:base@sha256:4cec8991f77878d1246e387f1efeb3667a452bfcf586bf02258434ffc7e62421","Warn: containerImage not pinned by hash: devops/dockerfile/device-image/Dockerfile-Test:4: pin your Docker image by updating fedml/fedml-device-image:base to fedml/fedml-device-image:base@sha256:4cec8991f77878d1246e387f1efeb3667a452bfcf586bf02258434ffc7e62421","Warn: containerImage not pinned by hash: devops/dockerfile/docs-server/Dockerfile:1: pin your Docker image by updating nginx:latest to nginx:latest@sha256:8541484afbc9c8a5a8a99b379568ebbc957f658583ec9448fc43104229c03cf8","Warn: containerImage not pinned by hash: devops/dockerfile/edge-client-server/Dockerfile:4: pin your Docker image by updating fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel to fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel@sha256:37f94e213cbb17c46127120cf56d52b810d38546329dc9b53d82a713dcac06e5","Warn: containerImage not pinned by hash: devops/dockerfile/edge-client-server/Lite-Dockerfile:4: pin your Docker image by updating fedml/fedml:light to fedml/fedml:light@sha256:a048d5176b987fbcb73aea7855aef7e7f03578eed7c6ab4b89886c2163cebafe","Warn: containerImage not pinned by hash: devops/dockerfile/edge-server/Dockerfile:3","Warn: containerImage not pinned by hash: devops/dockerfile/fedml-inference/Dockerfile:4: pin your Docker image by updating fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel to fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel@sha256:37f94e213cbb17c46127120cf56d52b810d38546329dc9b53d82a713dcac06e5","Warn: containerImage not pinned by hash: devops/dockerfile/fedml-inference/cuda_11_8/Dockerfile:2: pin your Docker image by updating nvcr.io/nvidia/pytorch:22.12-py3 to nvcr.io/nvidia/pytorch:22.12-py3@sha256:09a80f272dd173c9d8f28c23a1985aebe2bd3edd41a184ee9634f6e3f8a1f63d","Warn: containerImage not pinned by hash: devops/dockerfile/fedml-inference/default/Dockerfile:4: pin your Docker image by updating fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel to fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel@sha256:37f94e213cbb17c46127120cf56d52b810d38546329dc9b53d82a713dcac06e5","Warn: containerImage not pinned by hash: devops/dockerfile/fedml-inference/scalellm/Dockerfile:2: pin your Docker image by updating fedml/tensorrt:quantized to fedml/tensorrt:quantized@sha256:bdc2a97db0e7e1a1add22a89e234a6990d668e0729a24fd60d0b496dd6f577eb","Warn: containerImage not pinned by hash: devops/dockerfile/fedml-inference/stable_diffusion/Dockerfile:2: pin your Docker image by updating nvcr.io/nvidia/pytorch:23.06-py3 to nvcr.io/nvidia/pytorch:23.06-py3@sha256:1b425aac0b20d47983412f8d2e348890c8087466af57de295c982b32ffdd26c8","Warn: containerImage not pinned by hash: devops/dockerfile/fedml-inference/triton/Dockerfile:2: pin your Docker image by updating nvcr.io/nvidia/tritonserver:22.01-py3 to nvcr.io/nvidia/tritonserver:22.01-py3@sha256:bb4c71b62bf206c8d6b0db57b66c18e86b471f6549676849508de2afe9f435c0","Warn: containerImage not pinned by hash: devops/dockerfile/github-action-runner/Dockerfile:2: pin your Docker image by updating fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel to fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel@sha256:37f94e213cbb17c46127120cf56d52b810d38546329dc9b53d82a713dcac06e5","Warn: containerImage not pinned by hash: devops/dockerfile/model-inference-backend/Dockerfile:4: pin your Docker image by updating nvcr.io/nvidia/tritonserver:22.01-py3 to nvcr.io/nvidia/tritonserver:22.01-py3@sha256:bb4c71b62bf206c8d6b0db57b66c18e86b471f6549676849508de2afe9f435c0","Warn: containerImage not pinned by hash: devops/dockerfile/model-inference-converter/Dockerfile:4: pin your Docker image by updating ghcr.io/els-rd/transformer-deploy:0.4.0 to ghcr.io/els-rd/transformer-deploy:0.4.0@sha256:680c2a187f4e0432ad7d55521b9b27183dbfb4500c8b08c295a0c23c027734cc","Warn: containerImage not pinned by hash: devops/dockerfile/model-inference-ingress/Dockerfile:4","Warn: containerImage not pinned by hash: devops/dockerfile/model-premise-master/Dockerfile:4","Warn: containerImage not pinned by hash: devops/dockerfile/model-premise-slave/Dockerfile:5","Warn: containerImage not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Inference-Dev:4","Warn: containerImage not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Inference-Dev:24","Warn: containerImage not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Inference-Dev:39","Warn: containerImage not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Inference-Dev:52","Warn: containerImage not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Inference-Dev:74: pin your Docker image by updating nvcr.io/nvidia/tritonserver:22.01-py3 to nvcr.io/nvidia/tritonserver:22.01-py3@sha256:bb4c71b62bf206c8d6b0db57b66c18e86b471f6549676849508de2afe9f435c0","Warn: containerImage not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Traing-Dev:6: pin your Docker image by updating fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel to fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel@sha256:37f94e213cbb17c46127120cf56d52b810d38546329dc9b53d82a713dcac06e5","Warn: containerImage not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Traing-Dev:43: pin your Docker image by updating fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel to fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel@sha256:37f94e213cbb17c46127120cf56d52b810d38546329dc9b53d82a713dcac06e5","Warn: containerImage not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Traing-Dev:65: pin your Docker image by updating fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel to fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel@sha256:37f94e213cbb17c46127120cf56d52b810d38546329dc9b53d82a713dcac06e5","Warn: containerImage not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Traing-Dev:81: pin your Docker image by updating fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel to fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel@sha256:37f94e213cbb17c46127120cf56d52b810d38546329dc9b53d82a713dcac06e5","Warn: containerImage not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Traing-Dev:93: pin your Docker image by updating fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel to fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel@sha256:37f94e213cbb17c46127120cf56d52b810d38546329dc9b53d82a713dcac06e5","Warn: containerImage not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Traing-Dev:108: pin your Docker image by updating fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel to fedml/fedml:latest-torch1.13.1-cuda11.6-cudnn8-devel@sha256:37f94e213cbb17c46127120cf56d52b810d38546329dc9b53d82a713dcac06e5","Warn: containerImage not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Dev:4: pin your Docker image by updating docker.io/fedml/fedml-device-image:base to docker.io/fedml/fedml-device-image:base@sha256:4cec8991f77878d1246e387f1efeb3667a452bfcf586bf02258434ffc7e62421","Warn: containerImage not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Local:4: pin your Docker image by updating docker.io/fedml/fedml-device-image:base to docker.io/fedml/fedml-device-image:base@sha256:4cec8991f77878d1246e387f1efeb3667a452bfcf586bf02258434ffc7e62421","Warn: containerImage not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Release:4: pin your Docker image by updating docker.io/fedml/fedml-device-image:base to docker.io/fedml/fedml-device-image:base@sha256:4cec8991f77878d1246e387f1efeb3667a452bfcf586bf02258434ffc7e62421","Warn: containerImage not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Test:4: pin your Docker image by updating docker.io/fedml/fedml-device-image:base to docker.io/fedml/fedml-device-image:base@sha256:4cec8991f77878d1246e387f1efeb3667a452bfcf586bf02258434ffc7e62421","Warn: containerImage not pinned by hash: installation/build_fedml_docker/light/Dockerfile:3: pin your Docker image by updating python:3.8 to python:3.8@sha256:d411270700143fa2683cc8264d9fa5d3279fd3b6afff62ae81ea2f9d070e390c","Warn: containerImage not pinned by hash: installation/build_fedml_docker/nvidia_jetson/Dockerfile:1: pin your Docker image by updating nvcr.io/nvidia/l4t-ml:r35.1.0-py3 to nvcr.io/nvidia/l4t-ml:r35.1.0-py3@sha256:165a64e75eacd1382161aa82da2c296440aa5b4fd1927c0dcbfc12d37644bfb3","Warn: containerImage not pinned by hash: installation/build_fedml_docker/rpi/Dockerfile_32bit_armv7:1: pin your Docker image by updating balenalib/raspberrypi3-ubuntu-node to balenalib/raspberrypi3-ubuntu-node@sha256:ade630c996742568cc9abc8e918931e38a78ff7859dcb98fe658bb55b1fe6bc0","Warn: containerImage not pinned by hash: installation/build_fedml_docker/rpi/Dockerfile_64bit_armv8:1: pin your Docker image by updating balenalib/raspberrypi4-64-python:3.7.13 to balenalib/raspberrypi4-64-python:3.7.13@sha256:139080bd1ca1bd37240a4c904643dd3d1e02971a551afcbfb4c20f649bc895f6","Warn: containerImage not pinned by hash: installation/build_fedml_docker/test/Dockerfile:3","Warn: containerImage not pinned by hash: installation/build_fedml_docker/x86-64/Dockerfile:5: pin your Docker image by updating nvidia/cuda:12.1.0-cudnn8-devel-ubuntu22.04 to nvidia/cuda:12.1.0-cudnn8-devel-ubuntu22.04@sha256:7d3c22648869d206dc4fdd6a304ffd18309b7adeee1e43a1b53b5f126c44e69b","Warn: containerImage not pinned by hash: installation/build_fedml_docker/x86-64/deprecated/Dockerfile_deprecated:5: pin your Docker image by updating nvidia/cuda:11.6.1-cudnn8-devel-ubuntu20.04 to nvidia/cuda:11.6.1-cudnn8-devel-ubuntu20.04@sha256:17a3a7eeafcef99f327949782f9ec6653334e92ce02c09cfa2d60210ec237ed2","Warn: containerImage not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov5/Dockerfile:4: pin your Docker image by updating nvcr.io/nvidia/pytorch:21.10-py3 to nvcr.io/nvidia/pytorch:21.10-py3@sha256:267948c348eed1604ca180612d6a6ceb7298e4b0ee5900e2aee579edebb19caf","Warn: containerImage not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov5/utils/docker/Dockerfile:6: pin your Docker image by updating nvcr.io/nvidia/pytorch:22.05-py3 to nvcr.io/nvidia/pytorch:22.05-py3@sha256:63ea06f4f74424fee3f3df4e6a0d26ce37211b0b7fb43e719c559ef970674c69","Warn: containerImage not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov5/utils/docker/Dockerfile-arm64:6: pin your Docker image by updating arm64v8/ubuntu:20.04 to arm64v8/ubuntu:20.04@sha256:0908a765aeb02fe4e564b543eaed1d77839b7a08de94041e24328b2cb62ac553","Warn: containerImage not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov5/utils/docker/Dockerfile-cpu:6: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov5/utils/google_app_engine/Dockerfile:1: pin your Docker image by updating gcr.io/google-appengine/python to gcr.io/google-appengine/python@sha256:c6480acd38ca4605e0b83f5196ab6fe8a8b59a0288a7b8216c42dbc45b5de8f6","Warn: containerImage not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov7/utils/google_app_engine/Dockerfile:1: pin your Docker image by updating gcr.io/google-appengine/python to gcr.io/google-appengine/python@sha256:c6480acd38ca4605e0b83f5196ab6fe8a8b59a0288a7b8216c42dbc45b5de8f6","Warn: pipCommand not pinned by hash: devops/dockerfile/client-agent/Dockerfile:13","Warn: pipCommand not pinned by hash: devops/dockerfile/client-agent/Dockerfile:17","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Base:42","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Base:43","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Base:44","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Dev:13","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Dev:17","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Dev:21","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Dev:22","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Dev:23","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Local:13","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Local:17","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Local:21","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Release:13","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Release:17","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Release:21","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Release:22","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Release:23","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Test:13","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Test:17","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Test:21","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Test:22","Warn: pipCommand not pinned by hash: devops/dockerfile/device-image/Dockerfile-Test:23","Warn: pipCommand not pinned by hash: devops/dockerfile/edge-server/Dockerfile:12","Warn: pipCommand not pinned by hash: devops/dockerfile/edge-server/Dockerfile:16","Warn: pipCommand not pinned by hash: devops/dockerfile/fedml-inference/Dockerfile:10","Warn: pipCommand not pinned by hash: devops/dockerfile/fedml-inference/cuda_11_8/Dockerfile:8","Warn: pipCommand not pinned by hash: devops/dockerfile/fedml-inference/default/Dockerfile:10","Warn: pipCommand not pinned by hash: devops/dockerfile/fedml-inference/scalellm/Dockerfile:4","Warn: pipCommand not pinned by hash: devops/dockerfile/fedml-inference/stable_diffusion/Dockerfile:4","Warn: pipCommand not pinned by hash: devops/dockerfile/github-action-runner/Dockerfile:30","Warn: pipCommand not pinned by hash: devops/dockerfile/github-action-runner/Dockerfile:32","Warn: pipCommand not pinned by hash: devops/dockerfile/github-action-runner/Dockerfile:32","Warn: pipCommand not pinned by hash: devops/dockerfile/github-action-runner/Dockerfile:32","Warn: pipCommand not pinned by hash: devops/dockerfile/github-action-runner/Dockerfile:32","Warn: pipCommand not pinned by hash: devops/dockerfile/github-action-runner/Dockerfile:32","Warn: pipCommand not pinned by hash: devops/dockerfile/github-action-runner/Dockerfile:32","Warn: pipCommand not pinned by hash: devops/dockerfile/model-inference-backend/Dockerfile:11","Warn: pipCommand not pinned by hash: devops/dockerfile/model-inference-ingress/Dockerfile:13","Warn: pipCommand not pinned by hash: devops/dockerfile/model-inference-ingress/Dockerfile:18","Warn: pipCommand not pinned by hash: devops/dockerfile/model-premise-master/Dockerfile:13","Warn: pipCommand not pinned by hash: devops/dockerfile/model-premise-master/Dockerfile:18","Warn: pipCommand not pinned by hash: devops/dockerfile/model-premise-slave/Dockerfile:14","Warn: pipCommand not pinned by hash: devops/dockerfile/model-premise-slave/Dockerfile:19","Warn: pipCommand not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Inference-Dev:13","Warn: pipCommand not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Inference-Dev:18","Warn: pipCommand not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Traing-Dev:38","Warn: pipCommand not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Traing-Dev:39","Warn: pipCommand not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Traing-Dev:40","Warn: pipCommand not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Traing-Dev:52","Warn: pipCommand not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Traing-Dev:57","Warn: pipCommand not pinned by hash: devops/dockerfile/multi-stages-build/Dockerfile-Traing-Dev:67","Warn: pipCommand not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Dev:13","Warn: pipCommand not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Dev:17","Warn: pipCommand not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Dev:18","Warn: pipCommand not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Dev:19","Warn: pipCommand not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Local:13","Warn: pipCommand not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Local:17","Warn: pipCommand not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Release:13","Warn: pipCommand not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Release:17","Warn: pipCommand not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Release:18","Warn: pipCommand not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Release:19","Warn: pipCommand not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Test:13","Warn: pipCommand not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Test:17","Warn: pipCommand not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Test:18","Warn: pipCommand not pinned by hash: devops/dockerfile/server-agent/Dockerfile-Test:19","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/arm64v8/Dockerfile:135","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/arm64v8/Dockerfile:135","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/arm64v8/Dockerfile:145","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/arm64v8/Dockerfile:145","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/arm64v8/Dockerfile:159","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/arm64v8/Dockerfile:165","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/arm64v8/Dockerfile:166","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/arm64v8/Dockerfile:197","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/arm64v8/Dockerfile:198","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/arm64v8/Dockerfile:222","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/light/Dockerfile:13","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/light/Dockerfile:17","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/nvidia_jetson/Dockerfile:15","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/nvidia_jetson/Dockerfile:25","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/nvidia_jetson/Dockerfile:25","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/rpi/Dockerfile_32bit_armv7:37","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/rpi/Dockerfile_32bit_armv7:37","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/rpi/Dockerfile_64bit_armv8:11","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/rpi/Dockerfile_64bit_armv8:17","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/rpi/Dockerfile_64bit_armv8:20","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/rpi/Dockerfile_64bit_armv8:23","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/rpi/Dockerfile_64bit_armv8:25","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/rpi/Dockerfile_64bit_armv8:25","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/x86-64/Dockerfile:42","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/x86-64/deprecated/Dockerfile_deprecated:135","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/x86-64/deprecated/Dockerfile_deprecated:135","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/x86-64/deprecated/Dockerfile_deprecated:135","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/x86-64/deprecated/Dockerfile_deprecated:145","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/x86-64/deprecated/Dockerfile_deprecated:145","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/x86-64/deprecated/Dockerfile_deprecated:159","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/x86-64/deprecated/Dockerfile_deprecated:165","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/x86-64/deprecated/Dockerfile_deprecated:166","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/x86-64/deprecated/Dockerfile_deprecated:197","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/x86-64/deprecated/Dockerfile_deprecated:197","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/x86-64/deprecated/Dockerfile_deprecated:198","Warn: pipCommand not pinned by hash: installation/build_fedml_docker/x86-64/deprecated/Dockerfile_deprecated:222","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov5/Dockerfile:11","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov5/Dockerfile:13-14","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov5/utils/docker/Dockerfile:17","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov5/utils/docker/Dockerfile:19-21","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov5/utils/docker/Dockerfile-arm64:20","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov5/utils/docker/Dockerfile-arm64:21-22","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov5/utils/docker/Dockerfile-cpu:19","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov5/utils/docker/Dockerfile-cpu:20-22","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov5/utils/google_app_engine/Dockerfile:18","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov7/utils/google_app_engine/Dockerfile:18","Warn: downloadThenRun not pinned by hash: devops/scripts/build-docs.sh:4","Warn: pipCommand not pinned by hash: iot/anomaly_detection_for_cybersecurity/config/bootstrap.sh:2","Warn: pipCommand not pinned by hash: python/build_tools/github/build_source.sh:15","Warn: pipCommand not pinned by hash: python/build_tools/github/build_source.sh:16","Warn: pipCommand not pinned by hash: python/build_tools/github/build_source.sh:17","Warn: pipCommand not pinned by hash: python/build_tools/github/build_wheels.sh:31","Warn: pipCommand not pinned by hash: python/build_tools/github/test_source.sh:11","Warn: pipCommand not pinned by hash: python/build_tools/github/test_source.sh:12","Warn: pipCommand not pinned by hash: python/examples/deploy/complex_example/src/config/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/deploy/complex_example/src/config/bootstrap.sh:8","Warn: pipCommand not pinned by hash: python/examples/deploy/complex_example/src/config/bootstrap.sh:9","Warn: pipCommand not pinned by hash: python/examples/deploy/complex_example/src/config/bootstrap.sh:10","Warn: pipCommand not pinned by hash: python/examples/deploy/quick_start/src/config/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/deploy/quick_start/src/config/bootstrap.sh:8","Warn: pipCommand not pinned by hash: python/examples/deploy/quick_start/src/config/bootstrap.sh:9","Warn: pipCommand not pinned by hash: python/examples/deploy/quick_start/src/config/bootstrap.sh:10","Warn: pipCommand not pinned by hash: python/examples/deploy/stable_diffusion/src/bootstrap.sh:1","Warn: pipCommand not pinned by hash: python/examples/deploy/stable_diffusion/src/bootstrap.sh:2","Warn: pipCommand not pinned by hash: python/examples/deploy/stable_diffusion/src/bootstrap.sh:4","Warn: pipCommand not pinned by hash: python/examples/deploy/your_own_llm/src/config/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/deploy/your_own_llm/src/config/bootstrap.sh:8","Warn: pipCommand not pinned by hash: python/examples/deploy/your_own_llm/src/config/bootstrap.sh:9","Warn: pipCommand not pinned by hash: python/examples/deploy/your_own_llm/src/config/bootstrap.sh:10","Warn: pipCommand not pinned by hash: python/examples/federate/cross_device/mqtt_s3_fedavg_mnist_lenet_example/config/bootstrap.sh:5","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/image_segmentation/config/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/image_segmentation/config/simulation/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/config/bootstrap.sh:3","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/config/simulation/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov5/utils/aws/userdata.sh:14","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov5/utils/aws/userdata.sh:14","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov7/utils/aws/userdata.sh:14","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedcv/object_detection/model/yolov7/utils/aws/userdata.sh:14","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/ego_networks_link_pred/config_fedavg/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/ego_networks_link_pred/config_fedopt/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/ego_networks_link_pred/config_fedprox/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/ego_networks_node_clf/config_fedavg/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/ego_networks_node_clf/config_fedopt/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/ego_networks_node_clf/config_fedprox/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/moleculenet_graph_clf/config_fedavg/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/moleculenet_graph_clf/config_fedopt/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/moleculenet_graph_clf/config_fedprox/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/moleculenet_graph_reg/config_fedavg/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/moleculenet_graph_reg/config_fedopt/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/moleculenet_graph_reg/config_fedprox/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/recsys_subgraph_link_pred/config_fedavg/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/recsys_subgraph_link_pred/config_fedopt/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/recsys_subgraph_link_pred/config_fedprox/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/social_networks_graph_clf/config_fedavg/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/social_networks_graph_clf/config_fedopt/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fedgraphnn/social_networks_graph_clf/config_fedprox/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fednlp/seq2seq/config/bootstrap.sh:1","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fednlp/seq_tagging/config/bootstrap.sh:1","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fednlp/span_extraction/config/bootstrap.sh:1","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/fednlp/text_classification/config/bootstrap.sh:6","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/healthcare/fed_camelyon16/config/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/healthcare/fed_camelyon16/config/simulation/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/healthcare/fed_heart_disease/config/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/healthcare/fed_heart_disease/config/bootstrap.sh:8","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/healthcare/fed_heart_disease/config/simulation/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/healthcare/fed_isic2019/config/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/healthcare/fed_isic2019/config/simulation/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/healthcare/fed_ixi/config/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/healthcare/fed_ixi/config/simulation/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/healthcare/fed_kits19/config/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/healthcare/fed_kits19/config/simulation/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/prebuilt_jobs/healthcare/fed_tcga_brca/config/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/examples/federate/quick_start/beehive/config/bootstrap.sh:5","Warn: pipCommand not pinned by hash: python/examples/launch/train_build_package/src/bootstrap.sh:5","Warn: pipCommand not pinned by hash: python/examples/train/llm_train/configs/bootstrap.sh:7","Warn: pipCommand not pinned by hash: python/fedml/computing/scheduler/build-package/mlops-core/fedml-client/client-package/fedml/config/bootstrap.sh:3","Warn: pipCommand not pinned by hash: python/fedml/computing/scheduler/build-package/mlops-core/fedml-server/server-package/fedml/config/bootstrap.sh:3","Warn: pipCommand not pinned by hash: python/fedml/computing/scheduler/scheduler_entry/build-package/mlops-core/fedml-client/client-package/fedml/config/bootstrap.sh:3","Warn: pipCommand not pinned by hash: python/fedml/computing/scheduler/scheduler_entry/build-package/mlops-core/fedml-server/server-package/fedml/config/bootstrap.sh:3","Warn: pipCommand not pinned by hash: python/fedml/serving/templates/hf_template/config/bootstrap.sh:28","Warn: pipCommand not pinned by hash: python/fedml/serving/templates/hf_template/config/bootstrap.sh:31","Warn: pipCommand not pinned by hash: python/fedml/serving/templates/hf_template/scripts/setup_flash_attn.sh:7","Warn: pipCommand not pinned by hash: python/scripts/docker/bootstrap.sh:4","Warn: pipCommand not pinned by hash: python/spotlight_prj/fedllm/mlops_config/bootstrap.sh:8","Warn: pipCommand not pinned by hash: python/spotlight_prj/unitedllm/mlops_config/bootstrap.sh:8","Warn: pipCommand not pinned by hash: python/tests/full_e2e_test/test_mlops_cli.sh:11","Warn: pipCommand not pinned by hash: .github/workflows/build_wheels_and_dev.yml:123","Warn: pipCommand not pinned by hash: .github/workflows/build_wheels_and_releases.yml:123","Warn: pipCommand not pinned by hash: .github/workflows/build_wheels_and_test.yml:123","Warn: pipCommand not pinned by hash: .github/workflows/pylint.yml:43","Warn: pipCommand not pinned by hash: .github/workflows/pylint.yml:44","Warn: pipCommand not pinned by hash: .github/workflows/pylint.yml:45","Warn: pipCommand not pinned by hash: .github/workflows/pylint.yml:46","Warn: pipCommand not pinned by hash: .github/workflows/pylint.yml:47","Warn: pipCommand not pinned by hash: .github/workflows/pylint.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pylint.yml:49","Warn: pipCommand not pinned by hash: .github/workflows/pylint.yml:50","Warn: pipCommand not pinned by hash: .github/workflows/pylint.yml:51","Warn: pipCommand not pinned by hash: .github/workflows/pylint.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/smoke_test_cross_device_mnn_server_linux.yml:76","Info:   0 out of  19 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned","Info:   1 out of  51 containerImage dependencies pinned","Info:   0 out of 205 pipCommand dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#pinned-dependencies"}}]}