{"date":"2026-10-05","repo":{"name":"github.com/feast-dev/feast","commit":"211ecb8860e8eb9c78991516c6200d2a9c726531"},"scorecard":{"version":"v5.5.1-0.20260928043300-ac4b58443938","commit":"ac4b584439389e57f8d56d925f7fef245d8dda1f"},"score":5.5,"checks":[{"name":"Code-Review","score":8,"reason":"Found 26/30 approved changesets -- score normalized to 8","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#code-review","short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged."}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#maintained","short":"Determines if the project is \"actively maintained\"."}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#security-policy","short":"Determines if the project has published a security policy."}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: untrusted code checkout 'refs/pull/${{ github.event.pull_request.number }}/merge': .github/workflows/pr_integration_tests.yml:44","Warn: untrusted code checkout 'refs/pull/${{ github.event.pull_request.number }}/merge': .github/workflows/pr_integration_tests.yml:107","Warn: untrusted code checkout 'refs/pull/${{ github.event.pull_request.number }}/merge': .github/workflows/pr_registration_integration_tests.yml:25","Warn: untrusted code checkout 'refs/pull/${{ github.event.pull_request.number }}/merge': .github/workflows/pr_registration_integration_tests.yml:57"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#dangerous-workflow","short":"Determines if the project's GitHub Action workflows avoid dangerous patterns."}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/security.yml:21","Info: jobLevel 'contents' permission set to 'read': .github/workflows/security.yml:22","Info: jobLevel 'contents' permission set to 'read': .github/workflows/security.yml:51","Info: jobLevel 'contents' permission set to 'read': .github/workflows/security.yml:78","Warn: no topLevel permission defined: .github/workflows/build_wheels.yml:1","Warn: no topLevel permission defined: .github/workflows/check_skip_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/dbt-integration-tests.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/deploy-website.yml:12","Warn: no topLevel permission defined: .github/workflows/docker_smoke_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/lint_pr.yml:1","Warn: no topLevel permission defined: .github/workflows/linter.yml:1","Warn: no topLevel permission defined: .github/workflows/master_only.yml:1","Warn: no topLevel permission defined: .github/workflows/nightly-ci.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/nightly_python_sdk_release.yml:18","Warn: no topLevel permission defined: .github/workflows/operator-e2e-integration-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/operator_pr.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_chronon_integration_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_duckdb_integration_tests.yml:1","Warn: topLevel 'actions' permission set to 'write': .github/workflows/pr_integration_tests.yml:14","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/pr_integration_tests.yml:15","Warn: no topLevel permission defined: .github/workflows/pr_local_integration_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_ray_integration_tests.yml:1","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/pr_registration_integration_tests.yml:15","Warn: topLevel 'actions' permission set to 'write': .github/workflows/pr_registration_integration_tests.yml:14","Warn: no topLevel permission defined: .github/workflows/pr_remote_rbac_integration_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_website_build.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish.yml:39","Warn: no topLevel permission defined: .github/workflows/publish_helm_charts.yml:1","Warn: no topLevel permission defined: .github/workflows/publish_images.yml:1","Warn: no topLevel permission defined: .github/workflows/publish_python_sdk.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish_web_ui.yml:25","Warn: no topLevel permission defined: .github/workflows/registry-rest-api-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/security.yml:1","Warn: no topLevel permission defined: .github/workflows/smoke_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/unit_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/update_stable_branch.yml:1","Info: no jobLevel write permissions found"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#token-permissions","short":"Determines if the project's workflows follow the principle of least privilege."}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: infra/feast-operator/dist/operator-e2e-tests:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#binary-artifacts","short":"Determines if the project has generated executable (binary) artifacts in the source repository."}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#cii-best-practices","short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge."}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#license","short":"Determines if the project has defined a license."}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#fuzzing","short":"Determines if the project uses fuzzing."}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#branch-protection","short":"Determines if the default and release branches are protected with GitHub's branch protection settings."}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#signed-releases","short":"Determines if the project cryptographically signs release artifacts."}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/master_only.yml:89"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#packaging","short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall."}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:164: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_skip_tests.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/check_skip_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dbt-integration-tests.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/dbt-integration-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dbt-integration-tests.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/dbt-integration-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/dbt-integration-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/dbt-integration-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-website.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/deploy-website.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-website.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/deploy-website.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-website.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/deploy-website.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-website.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/deploy-website.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-website.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/deploy-website.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker_smoke_tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/docker_smoke_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker_smoke_tests.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/docker_smoke_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker_smoke_tests.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/docker_smoke_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker_smoke_tests.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/docker_smoke_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker_smoke_tests.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/docker_smoke_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker_smoke_tests.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/docker_smoke_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint_pr.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/lint_pr.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linter.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/linter.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linter.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/linter.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/linter.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/linter.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/linter.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/linter.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linter.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/linter.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master_only.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master_only.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master_only.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master_only.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master_only.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master_only.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master_only.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master_only.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master_only.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master_only.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master_only.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_python_sdk_release.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly_python_sdk_release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_python_sdk_release.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly_python_sdk_release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/operator-e2e-integration-tests.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/operator-e2e-integration-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/operator-e2e-integration-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/operator-e2e-integration-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/operator-e2e-integration-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/operator-e2e-integration-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/operator_pr.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/operator_pr.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/operator_pr.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/operator_pr.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_chronon_integration_tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_chronon_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_chronon_integration_tests.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_chronon_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_chronon_integration_tests.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_chronon_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_chronon_integration_tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_chronon_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_chronon_integration_tests.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_chronon_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_duckdb_integration_tests.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_duckdb_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_duckdb_integration_tests.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_duckdb_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_local_integration_tests.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_local_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_local_integration_tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_local_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_local_integration_tests.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_local_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_local_integration_tests.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_local_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_local_integration_tests.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_local_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_ray_integration_tests.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_ray_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_ray_integration_tests.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_ray_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_registration_integration_tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_registration_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_registration_integration_tests.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_registration_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_registration_integration_tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_registration_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_registration_integration_tests.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_registration_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_registration_integration_tests.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_registration_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_registration_integration_tests.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_registration_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_registration_integration_tests.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_registration_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_registration_integration_tests.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_registration_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_remote_rbac_integration_tests.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_remote_rbac_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_remote_rbac_integration_tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_remote_rbac_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_remote_rbac_integration_tests.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_remote_rbac_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_website_build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_website_build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_website_build.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_website_build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_helm_charts.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_helm_charts.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_helm_charts.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_helm_charts.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_helm_charts.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_helm_charts.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_images.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_images.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_images.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_images.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_images.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_images.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_images.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_images.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_images.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_images.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_images.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_images.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_python_sdk.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_python_sdk.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_python_sdk.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_python_sdk.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_web_ui.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_web_ui.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_web_ui.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_web_ui.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/registry-rest-api-tests.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/registry-rest-api-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/registry-rest-api-tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/registry-rest-api-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/registry-rest-api-tests.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/registry-rest-api-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/registry-rest-api-tests.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/registry-rest-api-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/registry-rest-api-tests.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/registry-rest-api-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:163: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:251: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/security.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/smoke_tests.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/smoke_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/smoke_tests.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/smoke_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/smoke_tests.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/smoke_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update_stable_branch.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/update_stable_branch.yml/master?enable=pin","Warn: containerImage not pinned by hash: .gitpod.Dockerfile:1: pin your Docker image by updating gitpod/workspace-base to gitpod/workspace-base@sha256:af4b4beb9eecaa96928aed94a96df2e3339ed1c92f565e6ef70553195f0779ee","Warn: containerImage not pinned by hash: go/infra/docker/feature-server/Dockerfile:1: pin your Docker image by updating golang:1.25 to golang:1.25@sha256:699337d620559a59b4a2bb298ad59611e535d2ee755a34cf2d2a98f37578dc80","Warn: containerImage not pinned by hash: infra/feast-operator/Dockerfile:2: pin your Docker image by updating registry.access.redhat.com/ubi9/go-toolset:1.26 to registry.access.redhat.com/ubi9/go-toolset:1.26@sha256:890b54e8d329f33f094ab17881bd37e20b80a54cc39141637310911d8dd9c575","Warn: containerImage not pinned by hash: infra/feast-operator/Dockerfile:26: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-minimal:9.8 to registry.access.redhat.com/ubi9/ubi-minimal:9.8@sha256:5ed244b62bbf4095080144d9d35eb8fcd3d39a9801f94aadd63b9d10978a01ae","Warn: containerImage not pinned by hash: java/infra/docker/feature-server/Dockerfile:5: pin your Docker image by updating maven:3-jdk-11 to maven:3-jdk-11@sha256:805f366910aea2a91ed263654d23df58bd239f218b2f9562ff51305be81fa215","Warn: containerImage not pinned by hash: java/infra/docker/feature-server/Dockerfile:33: pin your Docker image by updating amazoncorretto:11 to amazoncorretto:11@sha256:731c45b6f5245537ccd8a764a810af83dc4a5f0cac3349c13d49555b1ae341cc","Warn: containerImage not pinned by hash: java/infra/docker/feature-server/Dockerfile.dev:1","Warn: containerImage not pinned by hash: sdk/python/feast/infra/compute_engines/aws_lambda/Dockerfile:1: pin your Docker image by updating public.ecr.aws/lambda/python:3.9 to public.ecr.aws/lambda/python:3.9@sha256:ed423f4168b793088d341d8bc1c5ae0ca26a56d04adfd2f3254aca8445aa34c4","Warn: containerImage not pinned by hash: sdk/python/feast/infra/compute_engines/kubernetes/Dockerfile:1: pin your Docker image by updating debian:11-slim to debian:11-slim@sha256:e5b6442dd2e9684cf5e87d8338b5968f3b348636fc0be6d7850a381e3731a2bd","Warn: containerImage not pinned by hash: sdk/python/feast/infra/compute_engines/spark_application/Dockerfile:1: pin your Docker image by updating apache/spark:4.0.1 to apache/spark:4.0.1@sha256:acfe7e06e95dd13aa32ee03c464766900d52fba15f58e421f8e1213ec041bb94","Warn: containerImage not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/Dockerfile:1: pin your Docker image by updating registry.access.redhat.com/ubi9/python-312-minimal:latest to registry.access.redhat.com/ubi9/python-312-minimal:latest@sha256:a3a5cfe0c6738de28a6fa8f8cb61c16491605dd6786905c8984b79385c353783","Warn: containerImage not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/Dockerfile.dev:1: pin your Docker image by updating registry.access.redhat.com/ubi9/python-312-minimal:latest to registry.access.redhat.com/ubi9/python-312-minimal:latest@sha256:a3a5cfe0c6738de28a6fa8f8cb61c16491605dd6786905c8984b79385c353783","Warn: containerImage not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.binary:1","Warn: containerImage not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.binary.release:1: pin your Docker image by updating registry.access.redhat.com/ubi9/python-312-minimal:latest to registry.access.redhat.com/ubi9/python-312-minimal:latest@sha256:a3a5cfe0c6738de28a6fa8f8cb61c16491605dd6786905c8984b79385c353783","Warn: containerImage not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.builder.yarn:1: pin your Docker image by updating registry.access.redhat.com/ubi9/python-312-minimal:latest to registry.access.redhat.com/ubi9/python-312-minimal:latest@sha256:a3a5cfe0c6738de28a6fa8f8cb61c16491605dd6786905c8984b79385c353783","Warn: containerImage not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.builder.yum:1: pin your Docker image by updating registry.access.redhat.com/ubi9/python-312-minimal:latest to registry.access.redhat.com/ubi9/python-312-minimal:latest@sha256:a3a5cfe0c6738de28a6fa8f8cb61c16491605dd6786905c8984b79385c353783","Warn: containerImage not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist:1","Warn: containerImage not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist.release:1: pin your Docker image by updating registry.access.redhat.com/ubi9/python-312-minimal:latest to registry.access.redhat.com/ubi9/python-312-minimal:latest@sha256:a3a5cfe0c6738de28a6fa8f8cb61c16491605dd6786905c8984b79385c353783","Warn: containerImage not pinned by hash: sdk/python/feast/infra/transformation_servers/Dockerfile:1: pin your Docker image by updating python:3.11-slim to python:3.11-slim@sha256:0dd364ba7e10242f07755449e3a3d0e35f9efd987952737b90def6709ab0c5ce","Warn: containerImage not pinned by hash: ui/docker/Dockerfile:1: pin your Docker image by updating node:17.9.0-slim to node:17.9.0-slim@sha256:2eb08c3db371c724aa30ecc28a75debf7fdc0ac50340d7b675a3c98c93493d72","Warn: downloadThenRun not pinned by hash: .gitpod.Dockerfile:3","Warn: downloadThenRun not pinned by hash: .gitpod.Dockerfile:4","Warn: downloadThenRun not pinned by hash: .gitpod.Dockerfile:6","Warn: npmCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/Dockerfile.dev:5","Warn: npmCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/Dockerfile.dev:15-18","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.binary:33-34","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.binary.release:4-5","Warn: npmCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.builder.yarn:5","Warn: npmCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.builder.yum:8","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist:25-118","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist:25-118","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist:25-118","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist:129-130","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist:162-163","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist.release:25-118","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist.release:25-118","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist.release:25-118","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist.release:129-130","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist.release:133-134","Warn: npmCommand not pinned by hash: ui/docker/Dockerfile:9","Warn: npmCommand not pinned by hash: ui/docker/Dockerfile:20","Warn: pipCommand not pinned by hash: infra/scripts/test-end-to-end.sh:10","Warn: pipCommand not pinned by hash: infra/scripts/test-end-to-end.sh:12","Warn: pipCommand not pinned by hash: .github/workflows/build_wheels.yml:177","Warn: pipCommand not pinned by hash: .github/workflows/build_wheels.yml:178","Warn: pipCommand not pinned by hash: .github/workflows/build_wheels.yml:183","Warn: pipCommand not pinned by hash: .github/workflows/build_wheels.yml:79","Warn: npmCommand not pinned by hash: .github/workflows/lint_pr.yml:29","Warn: pipCommand not pinned by hash: .github/workflows/nightly-ci.yml:49","Warn: pipCommand not pinned by hash: .github/workflows/nightly-ci.yml:50","Warn: pipCommand not pinned by hash: .github/workflows/nightly-ci.yml:51","Warn: pipCommand not pinned by hash: .github/workflows/pr_chronon_integration_tests.yml:111","Warn: npmCommand not pinned by hash: .github/workflows/publish_web_ui.yml:96","Warn: pipCommand not pinned by hash: .github/workflows/security.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/security.yml:67","Warn: pipCommand not pinned by hash: .github/workflows/security.yml:67","Warn: goCommand not pinned by hash: .github/workflows/unit_tests.yml:118","Warn: goCommand not pinned by hash: .github/workflows/unit_tests.yml:119","Info:   0 out of  94 GitHub-owned GitHubAction dependencies pinned","Info:   2 out of  60 third-party GitHubAction dependencies pinned","Info:   0 out of  20 containerImage dependencies pinned","Info:   0 out of   3 downloadThenRun dependencies pinned","Info:   2 out of   4 goCommand dependencies pinned","Info:   2 out of  10 npmCommand dependencies pinned","Info:   2 out of  27 pipCommand dependencies pinned"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#pinned-dependencies","short":"Determines if the project has declared and pinned the dependencies of its build process."}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 27 commits out of 30 are checked with a SAST tool"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/ac4b584439389e57f8d56d925f7fef245d8dda1f/docs/checks.md#sast","short":"Determines if the project uses static code analysis."}}]}