{"date":"2026-10-12","repo":{"name":"github.com/lf-edge/eve","commit":"8d2015a904e72403efec21f6a8e5d06853182c99"},"scorecard":{"version":"v5.6.0","commit":"61e84743356275f6ffca23b1b2f2cb945e19eb96"},"score":8.2,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#code-review","short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged."}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#maintained","short":"Determines if the project is \"actively maintained\"."}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#security-policy","short":"Determines if the project has published a security policy."}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#dangerous-workflow","short":"Determines if the project's GitHub Action workflows avoid dangerous patterns."}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#license","short":"Determines if the project has defined a license."}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/actionlint.yml:21","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/actionlint.yml:22","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/assets.yml:31","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/assets.yml:76","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/assets.yml:259","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:79","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build-alpine-base.yml:105","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:133","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:177","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-cross-compilers.yml:81","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-cross-compilers.yml:30","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/build.yml:32","Info: jobLevel 'contents' permission set to 'read': .github/workflows/buildyetusondemand.yml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/check-fw-lists.yml:36","Info: jobLevel 'contents' permission set to 'read': .github/workflows/check-pubsub-persistence.yml:31","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:40","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:41","Info: jobLevel 'contents' permission set to 'read': .github/workflows/cve-scan.yml:16","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/eden-trusted.yml:303","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/eden-trusted.yml:136","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/eden-trusted.yml:250","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/go-tests.yml:41","Info: jobLevel 'contents' permission set to 'read': .github/workflows/osv-scanner.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/osv-scanner.yml:37","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/osv-scanner.yml:39","Info: jobLevel 'actions' permission set to 'read': .github/workflows/osv-scanner.yml:51","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/osv-scanner.yml:52","Info: jobLevel 'contents' permission set to 'read': .github/workflows/osv-scanner.yml:50","Info: jobLevel 'actions' permission set to 'read': .github/workflows/pr-gate.yml:40","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/pr-gate.yml:41","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/pr-gate.yml:42","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/pr-paths.yml:33","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/publish.yml:316","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/rerun-ci.yml:19","Info: jobLevel 'issues' permission set to 'read': .github/workflows/rerun-ci.yml:20","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/rerun-ci.yml:21","Info: jobLevel 'contents' permission set to 'read': .github/workflows/rerun-ci.yml:22","Info: jobLevel 'contents' permission set to 'read': .github/workflows/rust-tests.yml:45","Info: jobLevel 'contents' permission set to 'read': .github/workflows/rust-tests.yml:87","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/rust-tests.yml:35","Info: jobLevel 'contents' permission set to 'read': .github/workflows/sbom-coverage-check.yml:27","Info: found token with 'none' permissions: .github/workflows/actionlint.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ascii-check.yml:15","Info: found token with 'none' permissions: .github/workflows/assets.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/bpftrace-tests.yml:30","Info: found token with 'none' permissions: .github/workflows/build-alpine-base.yml:1","Info: found token with 'none' permissions: .github/workflows/build-cross-compilers.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/build.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/buildondemand.yml:25","Info: found token with 'none' permissions: .github/workflows/buildyetusondemand.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/check-docker-hashes-consistency.yml:26","Info: found token with 'none' permissions: .github/workflows/check-fw-lists.yml:1","Info: found token with 'none' permissions: .github/workflows/check-pubsub-persistence.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/claude-review.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/claude-sec-review.yml:10","Info: found token with 'none' permissions: .github/workflows/close-master-pr.yml:1","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/commit-messages.yml:15","Info: found token with 'none' permissions: .github/workflows/cve-scan.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/eden-trusted.yml:12","Info: topLevel 'actions' permission set to 'read': .github/workflows/eden-trusted.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/fuzz-tests.yml:26","Info: topLevel 'contents' permission set to 'read': .github/workflows/go-tests.yml:23","Info: found token with 'none' permissions: .github/workflows/osv-scanner.yml:1","Info: found token with 'none' permissions: .github/workflows/pr-gate.yml:1","Info: found token with 'none' permissions: .github/workflows/pr-paths.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish-evetest.yml:21","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish.yml:20","Info: found token with 'none' permissions: .github/workflows/request_codeowners_review.yml:1","Info: found token with 'none' permissions: .github/workflows/rerun-ci.yml:1","Info: found token with 'none' permissions: .github/workflows/rust-tests.yml:1","Info: found token with 'none' permissions: .github/workflows/sbom-coverage-check.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/semgrep.yml:15","Info: topLevel 'contents' permission set to 'read': .github/workflows/spdx.yml:17","Info: topLevel 'contents' permission set to 'read': .github/workflows/yetus.yml:15","Info: found token with 'none' permissions: .github/workflows/zizmor.yml:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#token-permissions","short":"Determines if the project's workflows follow the principle of least privilege."}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#cii-best-practices","short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge."}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/build-cross-compilers.yml:26"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#packaging","short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall."}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/ioBundleTree_test.go:298","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/ioBundleTree_test.go:402","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/ruleengine_test.go:303","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/usbcontroller_test.go:571","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/zedagent/parseconfig_test.go:2622","Info: GoBuiltInFuzzer integration found: pkg/pillar/types/assignableadapters_test.go:802"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#fuzzing","short":"Determines if the project uses fuzzing."}},{"name":"Branch-Protection","score":8,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Warn: codeowners review is not required on branch 'master'","Info: status check found to merge onto on branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#branch-protection","short":"Determines if the default and release branches are protected with GitHub's branch protection settings."}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 17.9.0 not signed: https://api.github.com/repos/lf-edge/eve/releases/407930090","Warn: release artifact 17.8.0 not signed: https://api.github.com/repos/lf-edge/eve/releases/406887960","Warn: release artifact 17.0.1-rc2 not signed: https://api.github.com/repos/lf-edge/eve/releases/401101798","Warn: release artifact 17.6.0 not signed: https://api.github.com/repos/lf-edge/eve/releases/400060201","Warn: release artifact 17.0.1-rc1 not signed: https://api.github.com/repos/lf-edge/eve/releases/400285767","Warn: release artifact 17.9.0 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/407930090","Warn: release artifact 17.8.0 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/406887960","Warn: release artifact 17.0.1-rc2 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/401101798","Warn: release artifact 17.6.0 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/400060201","Warn: release artifact 17.0.1-rc1 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/400285767"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#signed-releases","short":"Determines if the project cryptographically signs release artifacts."}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: pkg/uefi/rpi/start4.elf:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#binary-artifacts","short":"Determines if the project has generated executable (binary) artifacts in the source repository."}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#sast","short":"Determines if the project uses static code analysis."}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/claude-review.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/claude-review.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cve-scan.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/cve-scan.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:222: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:196: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:235: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:317: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/publish.yml/master?enable=pin","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:27: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:5291449c3df73caf6ed85e649dec1b9e818b39a5d8c871e97afc13e9cd5e8fa8","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:56","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:76","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:96: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:5291449c3df73caf6ed85e649dec1b9e818b39a5d8c871e97afc13e9cd5e8fa8","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:102","Warn: containerImage not pinned by hash: build-tools/src/scripts/Dockerfile:5","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/Dockerfile:4: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:5291449c3df73caf6ed85e649dec1b9e818b39a5d8c871e97afc13e9cd5e8fa8","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/root/Dockerfile:6","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/root/Dockerfile:8: pin your Docker image by updating lfedge/eve-bpftrace:ba87314486aa816c78d29ede899a267a5eb35be1 to lfedge/eve-bpftrace:ba87314486aa816c78d29ede899a267a5eb35be1@sha256:1417a61c6a9d9f7858c49b5cddb8036e6ace12acbc5413055b9b1da527b1f531","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/root/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: evetest/Dockerfile.broker:25: pin your Docker image by updating golang:1.25-alpine3.21 to golang:1.25-alpine3.21@sha256:b4dbd292a0852331c89dfd64e84d16811f3e3aae4c73c13d026c4d200715aff6","Warn: containerImage not pinned by hash: evetest/Dockerfile.broker:73: pin your Docker image by updating alpine:3.21 to alpine:3.21@sha256:ce64758a109eb420d874a118f87920e625e12d3634e03b4a5573fd9f6e5d3507","Warn: containerImage not pinned by hash: evetest/Dockerfile.evetest:21: pin your Docker image by updating lfedge/adam:0.0.82 to lfedge/adam:0.0.82@sha256:71094365945b855a0d8e46112751d9d3037010ef2b42bc3ad1423b8ca87da50f","Warn: containerImage not pinned by hash: evetest/Dockerfile.evetest:31: pin your Docker image by updating golang:1.26-alpine3.24 to golang:1.26-alpine3.24@sha256:3082400e369fa24d5fc60bca20edab3f6d604e0c5a690ec66b295eff4dd87ade","Warn: containerImage not pinned by hash: evetest/Dockerfile.evetest:65: pin your Docker image by updating golang:1.26-alpine3.24 to golang:1.26-alpine3.24@sha256:3082400e369fa24d5fc60bca20edab3f6d604e0c5a690ec66b295eff4dd87ade","Warn: containerImage not pinned by hash: evetest/protobuilder/Dockerfile:5: pin your Docker image by updating golang:1.24-alpine to golang:1.24-alpine@sha256:8bee1901f1e530bfb4a7850aa7a479d17ae3a18beb6e09064ed54cfd245b7191","Warn: containerImage not pinned by hash: evetest/sdn/vm/Dockerfile:15: pin your Docker image by updating golang:1.25-alpine3.21 to golang:1.25-alpine3.21@sha256:b4dbd292a0852331c89dfd64e84d16811f3e3aae4c73c13d026c4d200715aff6","Warn: containerImage not pinned by hash: evetest/sdn/vm/Dockerfile:61: pin your Docker image by updating alpine:3.21 to alpine:3.21@sha256:ce64758a109eb420d874a118f87920e625e12d3634e03b4a5573fd9f6e5d3507","Warn: containerImage not pinned by hash: evetest/sdn/vm/Dockerfile.vm:1: pin your Docker image by updating lfedge/eve-alpine:12.1.0 to lfedge/eve-alpine:12.1.0@sha256:4256090fe27ea1c10cbf0850a1cfa7c84e365b676fc40b187a98a27a28b6f103","Warn: containerImage not pinned by hash: evetest/sdn/vm/Dockerfile.vm:6: pin your Docker image by updating lfedge/eve-alpine:12.1.0 to lfedge/eve-alpine:12.1.0@sha256:4256090fe27ea1c10cbf0850a1cfa7c84e365b676fc40b187a98a27a28b6f103","Warn: containerImage not pinned by hash: evetest/testapps/logger-ctr/Dockerfile:4: pin your Docker image by updating alpine:3.21 to alpine:3.21@sha256:ce64758a109eb420d874a118f87920e625e12d3634e03b4a5573fd9f6e5d3507","Warn: containerImage not pinned by hash: evetest/testapps/lps/Dockerfile:7: pin your Docker image by updating golang:1.25 to golang:1.25@sha256:699337d620559a59b4a2bb298ad59611e535d2ee755a34cf2d2a98f37578dc80","Warn: containerImage not pinned by hash: evetest/testapps/lps/Dockerfile:20: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:534baea6a22c03a63003dbc8dbe78fe34bc0d7e595d9a9dc9834884ff530eb55","Warn: containerImage not pinned by hash: evetest/testapps/ubuntu-ctr/Dockerfile:4: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:534baea6a22c03a63003dbc8dbe78fe34bc0d7e595d9a9dc9834884ff530eb55","Warn: containerImage not pinned by hash: evetest/testapps/volverify/Dockerfile:7: pin your Docker image by updating golang:1.25 to golang:1.25@sha256:699337d620559a59b4a2bb298ad59611e535d2ee755a34cf2d2a98f37578dc80","Warn: containerImage not pinned by hash: evetest/testapps/volverify/Dockerfile:21: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:534baea6a22c03a63003dbc8dbe78fe34bc0d7e595d9a9dc9834884ff530eb55","Warn: containerImage not pinned by hash: pkg/alpine-base/Dockerfile:4: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:5291449c3df73caf6ed85e649dec1b9e818b39a5d8c871e97afc13e9cd5e8fa8","Warn: containerImage not pinned by hash: pkg/alpine/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:1f744180283ffb4eabcc3862531aeacf1de886b3 to lfedge/eve-alpine:1f744180283ffb4eabcc3862531aeacf1de886b3@sha256:b43826c5e706594322f145700cf728e5af2400271cc09235afd9300781220f6d","Warn: containerImage not pinned by hash: pkg/alpine/Dockerfile:46: pin your Docker image by updating lfedge/eve-alpine-base:77cc1495c875b7468dbf4123210abf86a1ffb852-07a6e7df6 to lfedge/eve-alpine-base:77cc1495c875b7468dbf4123210abf86a1ffb852-07a6e7df6@sha256:46e5bc76898b43a1ca964d9809a3ed0eee3a23b576a82f7f2f6dcaa3672b470d","Warn: containerImage not pinned by hash: pkg/alpine/Dockerfile:76","Warn: containerImage not pinned by hash: pkg/alpine/dnstest/Dockerfile:4","Warn: containerImage not pinned by hash: pkg/apparmor/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/bpftrace/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/bpftrace/Dockerfile:78","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:10: pin your Docker image by updating lfedge/eve-optee-os:df086d35825880fcb992aa0b4c2777c1a1dbbdfe to lfedge/eve-optee-os:df086d35825880fcb992aa0b4c2777c1a1dbbdfe@sha256:e18732b842b2cbce2b82bbcdaed641de7ea27438705d952ca1656eda830a9269","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:18: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:23: pin your Docker image by updating lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e to lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e@sha256:ac276a7f2dc0343bd00ef31ea9ad6bf69474ba4465a4c3b6aef44f2988cd1803","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:27: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:32","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:36","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:40","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:49","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:50","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:51","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:53","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:54","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:55","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:58","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:108","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:109","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:110","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:114: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:117","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:11: pin your Docker image by updating lfedge/eve-recovertpm:8ba80fed272550581a44bb553dfbdbf406d76ffd to lfedge/eve-recovertpm:8ba80fed272550581a44bb553dfbdbf406d76ffd@sha256:605b1dfb3c0cd18ff64afcb3013ec616ca4027d80e7edb5debe7b769fa8fde4c","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:12: pin your Docker image by updating lfedge/eve-bpftrace:ba87314486aa816c78d29ede899a267a5eb35be1 to lfedge/eve-bpftrace:ba87314486aa816c78d29ede899a267a5eb35be1@sha256:1417a61c6a9d9f7858c49b5cddb8036e6ace12acbc5413055b9b1da527b1f531","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:115","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile.spec:1: pin your Docker image by updating lfedge/eve-alpine:47d267f35e4832f639bf65bbe8a2e7b2f31e3e36 to lfedge/eve-alpine:47d267f35e4832f639bf65bbe8a2e7b2f31e3e36@sha256:17e751f8b367df8d60b86112bdf89eb2005b02fd24573934c314a7a633a11643","Warn: containerImage not pinned by hash: pkg/dom0-ztools/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/edgeview/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/edgeview/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:1: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:6","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:8","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:10","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:12","Warn: containerImage not pinned by hash: pkg/external-boot-image/Dockerfile.in:4","Warn: containerImage not pinned by hash: pkg/external-boot-image/Dockerfile.in:6","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:7","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:8","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:9","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:12","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:26","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:30","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:38","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:42","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:131","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:147: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:153","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:191","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:192","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:193","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:195: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:205","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:217","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:281","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:282","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:283","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:284","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:285","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:286","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:287","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:289","Warn: containerImage not pinned by hash: pkg/gpt-tools/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:40","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:46","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:53","Warn: containerImage not pinned by hash: pkg/guacd/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:6: pin your Docker image by updating lfedge/eve-rust:1.93.1-1 to lfedge/eve-rust:1.93.1-1@sha256:80324fd863a13478754ceb3d6290c348d064ca0381c763d5d5336b8b4e5e4ffb","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:10","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:13","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:16","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:20","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:31: pin your Docker image by updating lfedge/eve-debug:a99bfc7d51c9061ea3d8de762e951ac08ca8b619 to lfedge/eve-debug:a99bfc7d51c9061ea3d8de762e951ac08ca8b619@sha256:9d7f6bde5f6d4ea0b7db679d67e227a3c53a4023b2b0c868381b9b71711d781e","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:34: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/ipxe/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/kdump/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/kexec/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/kube/Dockerfile:22: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/measure-config/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/memory-monitor/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/mkconf/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/mkimage-iso-efi/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/mkimage-raw-efi/Dockerfile:8: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/mkrootfs-ext4/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/mkrootfs-squash/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:7: pin your Docker image by updating lfedge/eve-rust:1.93.1-1 to lfedge/eve-rust:1.93.1-1@sha256:80324fd863a13478754ceb3d6290c348d064ca0381c763d5d5336b8b4e5e4ffb","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:10","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:13","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:16","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:21","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:24","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:39","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:56: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/newlog/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/newlog/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/node-exporter/Dockerfile:4: pin your Docker image by updating prom/node-exporter:v1.9.1 to prom/node-exporter:v1.9.1@sha256:d00a542e409ee618a4edc67da14dd48c5da66726bbd5537ab2af9c1dfc442c8a","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:8: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:32","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:33","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:35","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:36","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:37","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:38","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:40","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:44","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:52","Warn: containerImage not pinned by hash: pkg/optee-client/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/optee-client/Dockerfile:49","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:15: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:20: pin your Docker image by updating lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e to lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e@sha256:ac276a7f2dc0343bd00ef31ea9ad6bf69474ba4465a4c3b6aef44f2988cd1803","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:24: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:29","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:33","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:37","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:46","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:47","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:49","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:51","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:52","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:53","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:56","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:13: pin your Docker image by updating lfedge/eve-uefi:69dbd346e47296abc02b605cc54b3f6e4fba4e98 to lfedge/eve-uefi:69dbd346e47296abc02b605cc54b3f6e4fba4e98@sha256:7190ffbdf82c41430fc7a9aaea12a49c3cb67d9160e59369a24e93431feddcfe","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:14: pin your Docker image by updating lfedge/eve-dom0-ztools:9265b1b94035f3321616d56e07a10c585926bedb to lfedge/eve-dom0-ztools:9265b1b94035f3321616d56e07a10c585926bedb@sha256:abca27e0dc8e1098a80050250f23e73d25f558ee9177c578f927a7f714ff4626","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:26: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:32: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:37: pin your Docker image by updating lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e to lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e@sha256:ac276a7f2dc0343bd00ef31ea9ad6bf69474ba4465a4c3b6aef44f2988cd1803","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:41: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:50","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:54","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:67","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:68","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:70","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:71","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:74","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:153: pin your Docker image by updating lfedge/eve-fscrypt:aec0819edd44c2c3b6c23f9377ef812119683e7c to lfedge/eve-fscrypt:aec0819edd44c2c3b6c23f9377ef812119683e7c@sha256:28db8094d91b1a23a8bda1376f82aeb77b96b6514227065a4f2bb546fb6ab550","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:154: pin your Docker image by updating lfedge/eve-gpt-tools:97629c8357a7de0f6fecacbae151ff9b5ea5bcd2 to lfedge/eve-gpt-tools:97629c8357a7de0f6fecacbae151ff9b5ea5bcd2@sha256:b59c9b2824a8dccaca0e6847d50c05d97bb195f4d073a0cd2dd0f2ba68a27eaf","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:155: pin your Docker image by updating lfedge/eve-storage-resizer:ec778533de829f0379cae6e2d66c1dab393f7704 to lfedge/eve-storage-resizer:ec778533de829f0379cae6e2d66c1dab393f7704@sha256:92bd38e9172568d1b4de2bc70049bf537f77a4cec84e2d8a7c92dadf0f6b59cd","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:160: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:167: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/pillar/vcom/api/builder/Dockerfile:5: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:5291449c3df73caf6ed85e649dec1b9e818b39a5d8c871e97afc13e9cd5e8fa8","Warn: containerImage not pinned by hash: pkg/recovertpm/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/rngd/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/sources/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/storage-init/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/storage-init/Dockerfile:12: pin your Docker image by updating lfedge/eve-storage-resizer:ec778533de829f0379cae6e2d66c1dab393f7704 to lfedge/eve-storage-resizer:ec778533de829f0379cae6e2d66c1dab393f7704@sha256:92bd38e9172568d1b4de2bc70049bf537f77a4cec84e2d8a7c92dadf0f6b59cd","Warn: containerImage not pinned by hash: pkg/storage-resizer/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:25","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:27","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:85","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:89","Warn: containerImage not pinned by hash: pkg/udev/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:23","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:36","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:47","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:72","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:74","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:83","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:25: pin your Docker image by updating lfedge/eve-rust:1.93.1-1 to lfedge/eve-rust:1.93.1-1@sha256:80324fd863a13478754ceb3d6290c348d064ca0381c763d5d5336b8b4e5e4ffb","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:28","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:38","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:42","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:65: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:6: pin your Docker image by updating lfedge/eve-dom0-ztools:9265b1b94035f3321616d56e07a10c585926bedb to lfedge/eve-dom0-ztools:9265b1b94035f3321616d56e07a10c585926bedb@sha256:abca27e0dc8e1098a80050250f23e73d25f558ee9177c578f927a7f714ff4626","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:102: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:118","Warn: containerImage not pinned by hash: pkg/watchdog/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/wwan/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/xen-tools/Dockerfile:6: pin your Docker image by updating lfedge/eve-uefi:69dbd346e47296abc02b605cc54b3f6e4fba4e98 to lfedge/eve-uefi:69dbd346e47296abc02b605cc54b3f6e4fba4e98@sha256:7190ffbdf82c41430fc7a9aaea12a49c3cb67d9160e59369a24e93431feddcfe","Warn: containerImage not pinned by hash: pkg/xen-tools/Dockerfile:7: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: pkg/xen-tools/Dockerfile:23: pin your Docker image by updating lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d to lfedge/eve-alpine:080e2b4c683508649d72d2ae9b166153d819ca5d@sha256:a7c073bf4576d72bfc3b8ff7814697f06608b07f2902354066315a32b76a6d3e","Warn: containerImage not pinned by hash: tools/yetus/Dockerfile:8: pin your Docker image by updating ghcr.io/apache/yetus:0.15.1 to ghcr.io/apache/yetus:0.15.1@sha256:13076949f2f1807a8d6d83f4a29e8dbe43b1fccd96c3c213b0f2b28c2e09ec84","Warn: goCommand not pinned by hash: eve-tools/bpftrace-compiler/vendor/github.com/agext/levenshtein/test.sh:5","Warn: goCommand not pinned by hash: eve-tools/bpftrace-compiler/vendor/github.com/pelletier/go-toml/benchmark.sh:10","Warn: goCommand not pinned by hash: pkg/edgeview/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/installer/src/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/kube/kube-init/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/kube/update-component/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/newlog/vendor/github.com/json-iterator/go/build.sh:10","Warn: pipCommand not pinned by hash: pkg/pillar/debian/postinst:15","Warn: pipCommand not pinned by hash: pkg/pillar/debian/postinst:18","Warn: pipCommand not pinned by hash: pkg/pillar/debian/postinst:26","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.golint.sh:5","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:5","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:6","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:7","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:8","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:9","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/recovertpm/src/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/vtpm/swtpm-vtpm/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/wwan/mmagent/vendor/github.com/json-iterator/go/build.sh:10","Warn: pipCommand not pinned by hash: .github/workflows/commit-messages.yml:41","Info:  74 out of  74 GitHub-owned GitHubAction dependencies pinned","Info:  24 out of  32 third-party GitHubAction dependencies pinned","Info:   3 out of 228 containerImage dependencies pinned","Info:   6 out of  23 goCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#pinned-dependencies","short":"Determines if the project has declared and pinned the dependencies of its build process."}}]}