{"date":"2026-08-17","repo":{"name":"github.com/feast-dev/feast","commit":"120a868d7ecfdfc77ea78ddb7c7b1f782c1e1c12"},"scorecard":{"version":"v5.5.1-0.20260815060127-d1fab88f5463","commit":"d1fab88f54636ff366076edfc5c239f97b3c8e66"},"score":5.7,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: untrusted code checkout 'refs/pull/${{ github.event.pull_request.number }}/merge': .github/workflows/pr_integration_tests.yml:44","Warn: untrusted code checkout 'refs/pull/${{ github.event.pull_request.number }}/merge': .github/workflows/pr_integration_tests.yml:107","Warn: untrusted code checkout 'refs/pull/${{ github.event.pull_request.number }}/merge': .github/workflows/pr_registration_integration_tests.yml:57","Warn: untrusted code checkout 'refs/pull/${{ github.event.pull_request.number }}/merge': .github/workflows/pr_registration_integration_tests.yml:25"],"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/security.yml:21","Info: jobLevel 'contents' permission set to 'read': .github/workflows/security.yml:22","Info: jobLevel 'contents' permission set to 'read': .github/workflows/security.yml:51","Info: jobLevel 'contents' permission set to 'read': .github/workflows/security.yml:78","Warn: no topLevel permission defined: .github/workflows/build_wheels.yml:1","Warn: no topLevel permission defined: .github/workflows/check_skip_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/dbt-integration-tests.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/deploy-website.yml:12","Warn: no topLevel permission defined: .github/workflows/docker_smoke_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/lint_pr.yml:1","Warn: no topLevel permission defined: .github/workflows/linter.yml:1","Warn: no topLevel permission defined: .github/workflows/master_only.yml:1","Warn: no topLevel permission defined: .github/workflows/nightly-ci.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/nightly_python_sdk_release.yml:18","Warn: no topLevel permission defined: .github/workflows/operator-e2e-integration-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/operator_pr.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_duckdb_integration_tests.yml:1","Warn: topLevel 'actions' permission set to 'write': .github/workflows/pr_integration_tests.yml:14","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/pr_integration_tests.yml:15","Warn: no topLevel permission defined: .github/workflows/pr_local_integration_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_ray_integration_tests.yml:1","Warn: topLevel 'actions' permission set to 'write': .github/workflows/pr_registration_integration_tests.yml:14","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/pr_registration_integration_tests.yml:15","Warn: no topLevel permission defined: .github/workflows/pr_remote_rbac_integration_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/pr_website_build.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish.yml:39","Warn: no topLevel permission defined: .github/workflows/publish_helm_charts.yml:1","Warn: no topLevel permission defined: .github/workflows/publish_images.yml:1","Warn: no topLevel permission defined: .github/workflows/publish_python_sdk.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish_web_ui.yml:25","Warn: no topLevel permission defined: .github/workflows/registry-rest-api-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/security.yml:1","Warn: no topLevel permission defined: .github/workflows/smoke_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/unit_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/update_stable_branch.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: infra/feast-operator/dist/operator-e2e-tests:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#binary-artifacts"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/master_only.yml:89"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#packaging"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 25 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:164: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_wheels.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/build_wheels.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_skip_tests.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/check_skip_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dbt-integration-tests.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/dbt-integration-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dbt-integration-tests.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/dbt-integration-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/dbt-integration-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/dbt-integration-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-website.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/deploy-website.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-website.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/deploy-website.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-website.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/deploy-website.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-website.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/deploy-website.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-website.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/deploy-website.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker_smoke_tests.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/docker_smoke_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker_smoke_tests.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/docker_smoke_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker_smoke_tests.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/docker_smoke_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker_smoke_tests.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/docker_smoke_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker_smoke_tests.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/docker_smoke_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker_smoke_tests.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/docker_smoke_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint_pr.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/lint_pr.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linter.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/linter.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linter.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/linter.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/linter.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/linter.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/linter.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/linter.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linter.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/linter.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master_only.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master_only.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master_only.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master_only.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master_only.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master_only.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master_only.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master_only.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master_only.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master_only.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/master_only.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/master_only.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly-ci.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly-ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_python_sdk_release.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly_python_sdk_release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_python_sdk_release.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/nightly_python_sdk_release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/operator-e2e-integration-tests.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/operator-e2e-integration-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/operator-e2e-integration-tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/operator-e2e-integration-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/operator-e2e-integration-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/operator-e2e-integration-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/operator_pr.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/operator_pr.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/operator_pr.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/operator_pr.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_duckdb_integration_tests.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_duckdb_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_duckdb_integration_tests.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_duckdb_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_integration_tests.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_local_integration_tests.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_local_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_local_integration_tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_local_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_local_integration_tests.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_local_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_local_integration_tests.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_local_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_local_integration_tests.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_local_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_ray_integration_tests.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_ray_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_ray_integration_tests.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_ray_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_registration_integration_tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_registration_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_registration_integration_tests.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_registration_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_registration_integration_tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_registration_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_registration_integration_tests.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_registration_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_registration_integration_tests.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_registration_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_registration_integration_tests.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_registration_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_registration_integration_tests.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_registration_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_registration_integration_tests.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_registration_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_remote_rbac_integration_tests.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_remote_rbac_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_remote_rbac_integration_tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_remote_rbac_integration_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr_remote_rbac_integration_tests.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_remote_rbac_integration_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_website_build.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_website_build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_website_build.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/pr_website_build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_helm_charts.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_helm_charts.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_helm_charts.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_helm_charts.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_helm_charts.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_helm_charts.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_images.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_images.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_images.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_images.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_images.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_images.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_images.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_images.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_images.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_images.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_images.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_images.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_python_sdk.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_python_sdk.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_python_sdk.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_python_sdk.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_web_ui.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_web_ui.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_web_ui.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/publish_web_ui.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/registry-rest-api-tests.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/registry-rest-api-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/registry-rest-api-tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/registry-rest-api-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/registry-rest-api-tests.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/registry-rest-api-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/registry-rest-api-tests.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/registry-rest-api-tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/registry-rest-api-tests.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/registry-rest-api-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/security.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/security.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/smoke_tests.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/smoke_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/smoke_tests.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/smoke_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/smoke_tests.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/smoke_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit_tests.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/unit_tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update_stable_branch.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/feast-dev/feast/update_stable_branch.yml/master?enable=pin","Warn: containerImage not pinned by hash: .gitpod.Dockerfile:1: pin your Docker image by updating gitpod/workspace-base to gitpod/workspace-base@sha256:af4b4beb9eecaa96928aed94a96df2e3339ed1c92f565e6ef70553195f0779ee","Warn: containerImage not pinned by hash: go/infra/docker/feature-server/Dockerfile:1: pin your Docker image by updating golang:1.25 to golang:1.25@sha256:cbff9d1a9041b316010f2da6b701b6c0d597718cb90928c85eb597334a0d23d4","Warn: containerImage not pinned by hash: infra/feast-operator/Dockerfile:2: pin your Docker image by updating registry.access.redhat.com/ubi9/go-toolset:1.25 to registry.access.redhat.com/ubi9/go-toolset:1.25@sha256:90a36bc2013b3fcb28e2a4b082c9b895d7c2c679e58b95aed9721970f3339d0e","Warn: containerImage not pinned by hash: infra/feast-operator/Dockerfile:26: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-minimal:9.8 to registry.access.redhat.com/ubi9/ubi-minimal:9.8@sha256:8eb2830d0936237fc13a1f2f7e45aecf90d69043380ad167fad0343632937f41","Warn: containerImage not pinned by hash: java/infra/docker/feature-server/Dockerfile:5: pin your Docker image by updating maven:3-jdk-11 to maven:3-jdk-11@sha256:805f366910aea2a91ed263654d23df58bd239f218b2f9562ff51305be81fa215","Warn: containerImage not pinned by hash: java/infra/docker/feature-server/Dockerfile:33: pin your Docker image by updating amazoncorretto:11 to amazoncorretto:11@sha256:e4a7475a706039728c3243e2421d93cb9b63abeac85f3a2f2a5e2f7197d745f2","Warn: containerImage not pinned by hash: java/infra/docker/feature-server/Dockerfile.dev:1","Warn: containerImage not pinned by hash: sdk/python/feast/infra/compute_engines/aws_lambda/Dockerfile:1: pin your Docker image by updating public.ecr.aws/lambda/python:3.9 to public.ecr.aws/lambda/python:3.9@sha256:ed423f4168b793088d341d8bc1c5ae0ca26a56d04adfd2f3254aca8445aa34c4","Warn: containerImage not pinned by hash: sdk/python/feast/infra/compute_engines/kubernetes/Dockerfile:1: pin your Docker image by updating debian:11-slim to debian:11-slim@sha256:f313b4bd62667092a59b3a664d7d3ab8b5e65f41675f48e81455a15dc5abe792","Warn: containerImage not pinned by hash: sdk/python/feast/infra/compute_engines/spark_application/Dockerfile:1: pin your Docker image by updating apache/spark:4.0.1 to apache/spark:4.0.1@sha256:acfe7e06e95dd13aa32ee03c464766900d52fba15f58e421f8e1213ec041bb94","Warn: containerImage not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/Dockerfile:1: pin your Docker image by updating registry.access.redhat.com/ubi9/python-312-minimal:latest to registry.access.redhat.com/ubi9/python-312-minimal:latest@sha256:0682a7aa239c28eaad5187914699612daaa3b1fa63abddaee7ba46f5b76c3361","Warn: containerImage not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/Dockerfile.dev:1: pin your Docker image by updating registry.access.redhat.com/ubi9/python-312-minimal:latest to registry.access.redhat.com/ubi9/python-312-minimal:latest@sha256:0682a7aa239c28eaad5187914699612daaa3b1fa63abddaee7ba46f5b76c3361","Warn: containerImage not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.binary:1","Warn: containerImage not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.binary.release:1: pin your Docker image by updating registry.access.redhat.com/ubi9/python-312-minimal:latest to registry.access.redhat.com/ubi9/python-312-minimal:latest@sha256:0682a7aa239c28eaad5187914699612daaa3b1fa63abddaee7ba46f5b76c3361","Warn: containerImage not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.builder.yarn:1: pin your Docker image by updating registry.access.redhat.com/ubi9/python-312-minimal:latest to registry.access.redhat.com/ubi9/python-312-minimal:latest@sha256:0682a7aa239c28eaad5187914699612daaa3b1fa63abddaee7ba46f5b76c3361","Warn: containerImage not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.builder.yum:1: pin your Docker image by updating registry.access.redhat.com/ubi9/python-312-minimal:latest to registry.access.redhat.com/ubi9/python-312-minimal:latest@sha256:0682a7aa239c28eaad5187914699612daaa3b1fa63abddaee7ba46f5b76c3361","Warn: containerImage not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist:1","Warn: containerImage not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist.release:1: pin your Docker image by updating registry.access.redhat.com/ubi9/python-312-minimal:latest to registry.access.redhat.com/ubi9/python-312-minimal:latest@sha256:0682a7aa239c28eaad5187914699612daaa3b1fa63abddaee7ba46f5b76c3361","Warn: containerImage not pinned by hash: sdk/python/feast/infra/transformation_servers/Dockerfile:1: pin your Docker image by updating python:3.11-slim to python:3.11-slim@sha256:9c900dea9e8fb7e16277c179b555cc72d29a352dbc33cff48ad5a0412fd5bfc7","Warn: containerImage not pinned by hash: ui/docker/Dockerfile:1: pin your Docker image by updating node:17.9.0-slim to node:17.9.0-slim@sha256:2eb08c3db371c724aa30ecc28a75debf7fdc0ac50340d7b675a3c98c93493d72","Warn: downloadThenRun not pinned by hash: .gitpod.Dockerfile:3","Warn: downloadThenRun not pinned by hash: .gitpod.Dockerfile:4","Warn: downloadThenRun not pinned by hash: .gitpod.Dockerfile:6","Warn: npmCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/Dockerfile.dev:5","Warn: npmCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/Dockerfile.dev:15-18","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.binary:33-34","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.binary.release:4-5","Warn: npmCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.builder.yarn:5","Warn: npmCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.builder.yum:8","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist:25-118","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist:25-118","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist:25-118","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist:129-130","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist:162-163","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist.release:25-118","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist.release:25-118","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist.release:25-118","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist.release:129-130","Warn: pipCommand not pinned by hash: sdk/python/feast/infra/feature_servers/multicloud/offline/Dockerfile.sdist.release:133-134","Warn: npmCommand not pinned by hash: ui/docker/Dockerfile:9","Warn: npmCommand not pinned by hash: ui/docker/Dockerfile:20","Warn: pipCommand not pinned by hash: infra/scripts/test-end-to-end.sh:10","Warn: pipCommand not pinned by hash: infra/scripts/test-end-to-end.sh:12","Warn: pipCommand not pinned by hash: .github/workflows/build_wheels.yml:79","Warn: pipCommand not pinned by hash: .github/workflows/build_wheels.yml:177","Warn: pipCommand not pinned by hash: .github/workflows/build_wheels.yml:178","Warn: pipCommand not pinned by hash: .github/workflows/build_wheels.yml:183","Warn: npmCommand not pinned by hash: .github/workflows/lint_pr.yml:29","Warn: pipCommand not pinned by hash: .github/workflows/nightly-ci.yml:49","Warn: pipCommand not pinned by hash: .github/workflows/nightly-ci.yml:50","Warn: pipCommand not pinned by hash: .github/workflows/nightly-ci.yml:51","Warn: npmCommand not pinned by hash: .github/workflows/publish_web_ui.yml:96","Warn: pipCommand not pinned by hash: .github/workflows/security.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/security.yml:67","Warn: pipCommand not pinned by hash: .github/workflows/security.yml:67","Warn: goCommand not pinned by hash: .github/workflows/unit_tests.yml:118","Warn: goCommand not pinned by hash: .github/workflows/unit_tests.yml:119","Info:   0 out of  89 GitHub-owned GitHubAction dependencies pinned","Info:   2 out of  58 third-party GitHubAction dependencies pinned","Info:   2 out of   4 goCommand dependencies pinned","Info:   2 out of  10 npmCommand dependencies pinned","Info:   2 out of  26 pipCommand dependencies pinned","Info:   0 out of  20 containerImage dependencies pinned","Info:   0 out of   3 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#pinned-dependencies"}}]}