{"date":"2026-08-24","repo":{"name":"github.com/apache/spark","commit":"7e875f1ee79096a95da97f7f1aa52b538baff57a"},"scorecard":{"version":"v5.5.1-0.20260815060127-d1fab88f5463","commit":"d1fab88f54636ff366076edfc5c239f97b3c8e66"},"score":5.6,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#branch-protection"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: jobLevel 'actions' permission set to 'write': .github/workflows/branch35_scheduler.yml:44","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/branch40_scheduler.yml:53","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/branch41_scheduler.yml:57","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/branch42_scheduler.yml:57","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/branch43_scheduler.yml:57","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/branch4x_scheduler.yml:57","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_codegen_jdk.yml:38","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_coverage.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_java17.yml:28","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_java21.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_java25.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_main.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_maven.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_maven_java21.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_maven_java21_arm.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_maven_java21_macos26.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_maven_java25.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_non_ansi.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_python_3.11.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_python_3.12_arm.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_python_3.12_classic_only.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_python_3.12_macos26.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_python_3.12_pandas_3.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_python_3.13.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_python_3.14.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_python_3.14_nogil.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_python_minimum.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_rockdb_as_ui_backend.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/build_uds.yml:30","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/notify_test_workflow.yml:36","Info: jobLevel 'actions' permission set to 'read': .github/workflows/notify_test_workflow.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/test_report.yml:34","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test_report.yml:35","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test_report.yml:36","Info: jobLevel 'actions' permission set to 'read': .github/workflows/update_build_status.yml:31","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/update_build_status.yml:32","Warn: no topLevel permission defined: .github/workflows/benchmark.yml:1","Warn: no topLevel permission defined: .github/workflows/branch35_scheduler.yml:1","Warn: no topLevel permission defined: .github/workflows/branch40_scheduler.yml:1","Warn: no topLevel permission defined: .github/workflows/branch41_scheduler.yml:1","Warn: no topLevel permission defined: .github/workflows/branch42_scheduler.yml:1","Warn: no topLevel permission defined: .github/workflows/branch43_scheduler.yml:1","Warn: no topLevel permission defined: .github/workflows/branch4x_scheduler.yml:1","Warn: no topLevel permission defined: .github/workflows/build_and_test.yml:1","Warn: no topLevel permission defined: .github/workflows/build_codegen_jdk.yml:1","Warn: no topLevel permission defined: .github/workflows/build_coverage.yml:1","Warn: no topLevel permission defined: .github/workflows/build_infra_images_cache.yml:1","Warn: no topLevel permission defined: .github/workflows/build_java17.yml:1","Warn: no topLevel permission defined: .github/workflows/build_java21.yml:1","Warn: no topLevel permission defined: .github/workflows/build_java25.yml:1","Warn: no topLevel permission defined: .github/workflows/build_main.yml:1","Warn: no topLevel permission defined: .github/workflows/build_maven.yml:1","Warn: no topLevel permission defined: .github/workflows/build_maven_java21.yml:1","Warn: no topLevel permission defined: .github/workflows/build_maven_java21_arm.yml:1","Warn: no topLevel permission defined: .github/workflows/build_maven_java21_macos26.yml:1","Warn: no topLevel permission defined: .github/workflows/build_maven_java25.yml:1","Warn: no topLevel permission defined: .github/workflows/build_non_ansi.yml:1","Warn: no topLevel permission defined: .github/workflows/build_python_3.11.yml:1","Warn: no topLevel permission defined: .github/workflows/build_python_3.12_arm.yml:1","Warn: no topLevel permission defined: .github/workflows/build_python_3.12_classic_only.yml:1","Warn: no topLevel permission defined: .github/workflows/build_python_3.12_macos26.yml:1","Warn: no topLevel permission defined: .github/workflows/build_python_3.12_pandas_3.yml:1","Warn: no topLevel permission defined: .github/workflows/build_python_3.13.yml:1","Warn: no topLevel permission defined: .github/workflows/build_python_3.14.yml:1","Warn: no topLevel permission defined: .github/workflows/build_python_3.14_nogil.yml:1","Warn: no topLevel permission defined: .github/workflows/build_python_3.9.yml:1","Warn: no topLevel permission defined: .github/workflows/build_python_connect.yml:1","Warn: no topLevel permission defined: .github/workflows/build_python_connect40.yml:1","Warn: no topLevel permission defined: .github/workflows/build_python_minimum.yml:1","Warn: no topLevel permission defined: .github/workflows/build_python_pypy3.10.yml:1","Warn: no topLevel permission defined: .github/workflows/build_rockdb_as_ui_backend.yml:1","Warn: no topLevel permission defined: .github/workflows/build_scala213.yml:1","Warn: no topLevel permission defined: .github/workflows/build_sparkr_window.yml:1","Warn: no topLevel permission defined: .github/workflows/build_uds.yml:1","Warn: no topLevel permission defined: .github/workflows/maven_test.yml:1","Warn: no topLevel permission defined: .github/workflows/notify_test_workflow.yml:1","Warn: no topLevel permission defined: .github/workflows/pages.yml:1","Warn: no topLevel permission defined: .github/workflows/publish_snapshot.yml:1","Warn: no topLevel permission defined: .github/workflows/python_hosted_runner_test.yml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yml:1","Warn: no topLevel permission defined: .github/workflows/test_report.yml:1","Warn: no topLevel permission defined: .github/workflows/update_build_status.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#token-permissions"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/build_infra_images_cache.yml:53"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#packaging"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#binary-artifacts"}},{"name":"SAST","score":0,"reason":"no SAST tool detected","details":["Warn: no pull requests merged into dev branch"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Info: Possibly incomplete results: error parsing shell code: unclosed here-document 'EOF': dev/gen-protos.sh:0","Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/benchmark.yml:233","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/benchmark.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/benchmark.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/benchmark.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/benchmark.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/benchmark.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/benchmark.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/benchmark.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/benchmark.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/benchmark.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:202: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/benchmark.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/benchmark.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmark.yml:253: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/benchmark.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:352: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:359: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:369: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:384: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:389: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:403: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:425: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:440: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:446: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:471: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:671: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:679: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:689: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:701: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:718: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:789: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:805: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:828: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:836: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:846: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:857: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:862: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:881: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:902: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:921: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1055: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1056: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1083: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1091: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1101: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1108: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1119: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1163: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:554: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:560: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:570: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:577: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:593: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:947: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:955: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:965: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:972: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:983: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1180: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1186: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1196: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1203: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1208: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1217: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1223: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1267: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1282: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1303: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1309: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1319: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1326: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1331: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1346: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1361: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1374: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1380: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1390: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1404: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1409: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1445: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1459: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_and_test.yml:1461: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_and_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_infra_images_cache.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_infra_images_cache.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_python_connect.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_python_connect.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_python_connect.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_python_connect.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_python_connect.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_python_connect.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_python_connect.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_python_connect.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_python_connect.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_python_connect.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_python_connect.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_python_connect.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_python_connect.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_python_connect.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_python_connect40.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_python_connect40.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_python_connect40.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_python_connect40.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_python_connect40.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_python_connect40.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_python_connect40.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_python_connect40.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_python_connect40.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_python_connect40.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_python_connect40.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_python_connect40.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_python_connect40.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_python_connect40.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_sparkr_window.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_sparkr_window.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_sparkr_window.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_sparkr_window.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_sparkr_window.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_sparkr_window.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_sparkr_window.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_sparkr_window.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_sparkr_window.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/build_sparkr_window.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven_test.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/maven_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven_test.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/maven_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven_test.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/maven_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven_test.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/maven_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven_test.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/maven_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven_test.yml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/maven_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven_test.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/maven_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven_test.yml:239: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/maven_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven_test.yml:246: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/maven_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven_test.yml:251: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/maven_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven_test.yml:268: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/maven_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven_test.yml:352: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/maven_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven_test.yml:360: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/maven_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify_test_workflow.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/notify_test_workflow.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pages.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/pages.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pages.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/pages.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pages.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/pages.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pages.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/pages.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pages.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/pages.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_snapshot.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/publish_snapshot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_snapshot.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/publish_snapshot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_snapshot.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/publish_snapshot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_snapshot.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/publish_snapshot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_hosted_runner_test.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/python_hosted_runner_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_hosted_runner_test.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/python_hosted_runner_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_hosted_runner_test.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/python_hosted_runner_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_hosted_runner_test.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/python_hosted_runner_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_hosted_runner_test.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/python_hosted_runner_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_hosted_runner_test.yml:180: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/python_hosted_runner_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_hosted_runner_test.yml:190: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/python_hosted_runner_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_hosted_runner_test.yml:202: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/python_hosted_runner_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_hosted_runner_test.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/python_hosted_runner_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_hosted_runner_test.yml:214: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/python_hosted_runner_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_hosted_runner_test.yml:231: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/python_hosted_runner_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_hosted_runner_test.yml:257: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/python_hosted_runner_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python_hosted_runner_test.yml:266: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/python_hosted_runner_test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:314: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:320: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/stale.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_report.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/test_report.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update_build_status.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/spark/update_build_status.yml/master?enable=pin","Warn: containerImage not pinned by hash: binder/Dockerfile:18: pin your Docker image by updating python:3.11-slim to python:3.11-slim@sha256:9c900dea9e8fb7e16277c179b555cc72d29a352dbc33cff48ad5a0412fd5bfc7","Warn: containerImage not pinned by hash: dev/create-release/spark-rm/Dockerfile:23","Warn: containerImage not pinned by hash: dev/create-release/spark-rm/Dockerfile.base:30: pin your Docker image by updating ubuntu:jammy-20250819 to ubuntu:jammy-20250819@sha256:4e0171b9275e12d375863f2b3ae9ce00a4c53ddda176bd55868df97ac6f21a6e","Warn: containerImage not pinned by hash: dev/spark-test-image/connect-gen-protos/Dockerfile:19: pin your Docker image by updating ubuntu:noble to ubuntu:noble@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517","Warn: containerImage not pinned by hash: dev/spark-test-image/docs/Dockerfile:20: pin your Docker image by updating ubuntu:noble to ubuntu:noble@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517","Warn: containerImage not pinned by hash: dev/spark-test-image/lint/Dockerfile:20: pin your Docker image by updating ubuntu:noble to ubuntu:noble@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517","Warn: containerImage not pinned by hash: dev/spark-test-image/python-311/Dockerfile:20: pin your Docker image by updating ubuntu:noble to ubuntu:noble@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517","Warn: containerImage not pinned by hash: dev/spark-test-image/python-312-classic-only/Dockerfile:20: pin your Docker image by updating ubuntu:noble to ubuntu:noble@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517","Warn: containerImage not pinned by hash: dev/spark-test-image/python-312-pandas-3/Dockerfile:23: pin your Docker image by updating ubuntu:noble to ubuntu:noble@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517","Warn: containerImage not pinned by hash: dev/spark-test-image/python-312/Dockerfile:20: pin your Docker image by updating ubuntu:noble to ubuntu:noble@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517","Warn: containerImage not pinned by hash: dev/spark-test-image/python-313/Dockerfile:20: pin your Docker image by updating ubuntu:noble to ubuntu:noble@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517","Warn: containerImage not pinned by hash: dev/spark-test-image/python-314-nogil/Dockerfile:20: pin your Docker image by updating ubuntu:noble to ubuntu:noble@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517","Warn: containerImage not pinned by hash: dev/spark-test-image/python-314/Dockerfile:20: pin your Docker image by updating ubuntu:noble to ubuntu:noble@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517","Warn: containerImage not pinned by hash: dev/spark-test-image/python-minimum/Dockerfile:20: pin your Docker image by updating ubuntu:noble to ubuntu:noble@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517","Warn: containerImage not pinned by hash: dev/spark-test-image/sparkr/Dockerfile:20: pin your Docker image by updating ubuntu:noble to ubuntu:noble@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517","Warn: containerImage not pinned by hash: resource-managers/kubernetes/docker/src/main/dockerfiles/spark/Dockerfile:20: pin your Docker image by updating eclipse-temurin:25-jre to eclipse-temurin:25-jre@sha256:f9e65324a37f28209ce7dd0e5149a7aa954520ed936fb87813cf6ded2400a112","Warn: containerImage not pinned by hash: resource-managers/kubernetes/docker/src/main/dockerfiles/spark/bindings/R/Dockerfile:20","Warn: containerImage not pinned by hash: resource-managers/kubernetes/docker/src/main/dockerfiles/spark/bindings/python/Dockerfile:20","Warn: pipCommand not pinned by hash: binder/Dockerfile:20","Warn: pipCommand not pinned by hash: binder/postBuild:40","Warn: pipCommand not pinned by hash: dev/run-pip-tests:80","Warn: pipCommand not pinned by hash: sql/create-docs.sh:37","Warn: npmCommand not pinned by hash: .github/workflows/build_and_test.yml:1468","Warn: pipCommand not pinned by hash: .github/workflows/build_python_connect.yml:74","Warn: pipCommand not pinned by hash: .github/workflows/build_python_connect.yml:75","Warn: pipCommand not pinned by hash: .github/workflows/build_python_connect40.yml:71","Warn: pipCommand not pinned by hash: .github/workflows/build_python_connect40.yml:74","Warn: pipCommand not pinned by hash: .github/workflows/build_python_connect40.yml:77","Info:   0 out of 142 GitHub-owned GitHubAction dependencies pinned","Info:  34 out of  34 third-party GitHubAction dependencies pinned","Info:   0 out of   9 pipCommand dependencies pinned","Info:   1 out of   2 npmCommand dependencies pinned","Info:   0 out of  18 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#pinned-dependencies"}}]}