{"date":"2026-05-25","repo":{"name":"github.com/lf-edge/eve","commit":"324bd3c9a3a609e34aeeaada8b3b1a3bcf6700b3"},"scorecard":{"version":"v5.5.1-0.20260519155427-916bfc57fa74","commit":"916bfc57fa7431467a33a5a013cba3f8a0c1ec50"},"score":5.9,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#license"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/build-cross-compilers.yml:26"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/ascii-check.yml:26","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/ascii-check.yml:26","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/commit-messages.yml:25","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/commit-messages.yml:25","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/request_codeowners_review.yml:26","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/request_codeowners_review.yml:26","Warn: script injection with untrusted input ' github.event.comment.body ': .github/workflows/rerun-ci.yml:42","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/spdx.yml:27","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/spdx.yml:27"],"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#dangerous-workflow"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/ioBundleTree_test.go:297","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/ioBundleTree_test.go:401","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/ruleengine_test.go:303","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/usbcontroller_test.go:571","Info: GoBuiltInFuzzer integration found: pkg/pillar/controllerconn/resolver_test.go:387","Info: GoBuiltInFuzzer integration found: pkg/pillar/types/assignableadapters_test.go:660"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#fuzzing"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:71","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build-alpine-base.yml:97","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:123","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:167","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-cross-compilers.yml:30","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-cross-compilers.yml:78","Info: jobLevel 'contents' permission set to 'read': .github/workflows/buildyetusondemand.yml:29","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:38","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:39","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/rerun-ci.yml:17","Info: jobLevel 'issues' permission set to 'read': .github/workflows/rerun-ci.yml:18","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/rerun-ci.yml:19","Info: jobLevel 'contents' permission set to 'read': .github/workflows/rerun-ci.yml:20","Info: topLevel 'contents' permission set to 'read': .github/workflows/actionlint.yml:16","Warn: topLevel 'checks' permission set to 'write': .github/workflows/actionlint.yml:17","Warn: no topLevel permission defined: .github/workflows/ascii-check.yml:1","Warn: no topLevel permission defined: .github/workflows/assets.yml:1","Info: found token with 'none' permissions: .github/workflows/build-alpine-base.yml:1","Info: found token with 'none' permissions: .github/workflows/build-cross-compilers.yml:1","Warn: no topLevel permission defined: .github/workflows/build.yml:1","Warn: no topLevel permission defined: .github/workflows/buildondemand.yml:1","Info: found token with 'none' permissions: .github/workflows/buildyetusondemand.yml:1","Warn: no topLevel permission defined: .github/workflows/check-docker-hashes-consistency.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/claude-review.yml:14","Warn: no topLevel permission defined: .github/workflows/close-master-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Warn: no topLevel permission defined: .github/workflows/commit-messages.yml:1","Warn: no topLevel permission defined: .github/workflows/cve-scan.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/eden-trusted.yml:12","Info: topLevel 'actions' permission set to 'read': .github/workflows/eden-trusted.yml:13","Warn: topLevel 'statuses' permission set to 'write': .github/workflows/eden-trusted.yml:14","Warn: no topLevel permission defined: .github/workflows/fuzz-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/go-tests.yml:1","Info: topLevel 'actions' permission set to 'read': .github/workflows/osv-scanner.yml:30","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/osv-scanner.yml:32","Info: topLevel 'contents' permission set to 'read': .github/workflows/osv-scanner.yml:34","Warn: no topLevel permission defined: .github/workflows/pr-gate.yml:1","Warn: no topLevel permission defined: .github/workflows/publish.yml:1","Warn: no topLevel permission defined: .github/workflows/request_codeowners_review.yml:1","Warn: no topLevel permission defined: .github/workflows/rerun-ci.yml:1","Warn: no topLevel permission defined: .github/workflows/sbom-coverage-check.yml:1","Warn: no topLevel permission defined: .github/workflows/spdx.yml:1","Warn: no topLevel permission defined: .github/workflows/yetus.yml:1","Info: found token with 'none' permissions: .github/workflows/zizmor.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#token-permissions"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Warn: codeowners review is not required on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 17.0.0-rc1 not signed: https://api.github.com/repos/lf-edge/eve/releases/327287318","Warn: release artifact 16.0.1-rc3 not signed: https://api.github.com/repos/lf-edge/eve/releases/326385587","Warn: release artifact 14.5.4-rc1 not signed: https://api.github.com/repos/lf-edge/eve/releases/324314244","Warn: release artifact 16.14.0 not signed: https://api.github.com/repos/lf-edge/eve/releases/319748614","Warn: release artifact 16.0.1-rc2 not signed: https://api.github.com/repos/lf-edge/eve/releases/317581562","Warn: release artifact 17.0.0-rc1 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/327287318","Warn: release artifact 16.0.1-rc3 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/326385587","Warn: release artifact 14.5.4-rc1 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/324314244","Warn: release artifact 16.14.0 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/319748614","Warn: release artifact 16.0.1-rc2 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/317581562"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: pkg/uefi/rpi/start4.elf:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#binary-artifacts"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/claude-review.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/claude-review.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cve-scan.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/cve-scan.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:208: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:221: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:309: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/publish.yml/master?enable=pin","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:27: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:310c62b5e7ca5b08167e4384c68db0fd2905dd9c7493756d356e893909057601","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:57","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:77","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:97: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:310c62b5e7ca5b08167e4384c68db0fd2905dd9c7493756d356e893909057601","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:103","Warn: containerImage not pinned by hash: build-tools/src/scripts/Dockerfile:2: pin your Docker image by updating golang:1.20.1-alpine to golang:1.20.1-alpine@sha256:87d0a3309b34e2ca732efd69fb899d3c420d3382370fd6e7e6d2cb5c930f27f9","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/Dockerfile:4: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:310c62b5e7ca5b08167e4384c68db0fd2905dd9c7493756d356e893909057601","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/root/Dockerfile:6","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/root/Dockerfile:8: pin your Docker image by updating lfedge/eve-bpftrace:01911eb980cc03b8bfd8f80b68892574f4b2e09d to lfedge/eve-bpftrace:01911eb980cc03b8bfd8f80b68892574f4b2e09d@sha256:3035caf2f0341a5d3cf7057263de0a5d2d81d3457e17660d654accb802fadc85","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/root/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/alpine-base/Dockerfile:4: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:310c62b5e7ca5b08167e4384c68db0fd2905dd9c7493756d356e893909057601","Warn: containerImage not pinned by hash: pkg/alpine/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:1f744180283ffb4eabcc3862531aeacf1de886b3 to lfedge/eve-alpine:1f744180283ffb4eabcc3862531aeacf1de886b3@sha256:b43826c5e706594322f145700cf728e5af2400271cc09235afd9300781220f6d","Warn: containerImage not pinned by hash: pkg/alpine/Dockerfile:46: pin your Docker image by updating lfedge/eve-alpine-base:77cc1495c875b7468dbf4123210abf86a1ffb852-07a6e7df6 to lfedge/eve-alpine-base:77cc1495c875b7468dbf4123210abf86a1ffb852-07a6e7df6@sha256:46e5bc76898b43a1ca964d9809a3ed0eee3a23b576a82f7f2f6dcaa3672b470d","Warn: containerImage not pinned by hash: pkg/alpine/Dockerfile:76","Warn: containerImage not pinned by hash: pkg/alpine/dnstest/Dockerfile:4","Warn: containerImage not pinned by hash: pkg/apparmor/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/bpftrace/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/bpftrace/Dockerfile:81","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:10: pin your Docker image by updating lfedge/eve-optee-os:3faef302daf5d825c80bdf46e17e42edefde75bf to lfedge/eve-optee-os:3faef302daf5d825c80bdf46e17e42edefde75bf@sha256:6c685d1fc7a1ff7d938f6d6a0e5fee634be8a846781909a9d7d5d2deb6a26470","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:18: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:23: pin your Docker image by updating lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e to lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e@sha256:ac276a7f2dc0343bd00ef31ea9ad6bf69474ba4465a4c3b6aef44f2988cd1803","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:27: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:32","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:36","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:40","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:49","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:50","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:51","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:53","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:54","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:55","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:58","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:108","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:109","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:110","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:114: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:117","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:11: pin your Docker image by updating lfedge/eve-recovertpm:2df1605473a4044952d18ce20399550791f4bb58 to lfedge/eve-recovertpm:2df1605473a4044952d18ce20399550791f4bb58@sha256:becb7d5cb9b0bd475b309872f5a45a04838ef850552817160a3f5e02412e6df4","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:12: pin your Docker image by updating lfedge/eve-bpftrace:01911eb980cc03b8bfd8f80b68892574f4b2e09d to lfedge/eve-bpftrace:01911eb980cc03b8bfd8f80b68892574f4b2e09d@sha256:3035caf2f0341a5d3cf7057263de0a5d2d81d3457e17660d654accb802fadc85","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:91","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile.spec:1: pin your Docker image by updating lfedge/eve-alpine:47d267f35e4832f639bf65bbe8a2e7b2f31e3e36 to lfedge/eve-alpine:47d267f35e4832f639bf65bbe8a2e7b2f31e3e36@sha256:17e751f8b367df8d60b86112bdf89eb2005b02fd24573934c314a7a633a11643","Warn: containerImage not pinned by hash: pkg/dom0-ztools/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/edgeview/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/edgeview/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:1: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:6","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:8","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:10","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:12","Warn: containerImage not pinned by hash: pkg/external-boot-image/Dockerfile.in:4","Warn: containerImage not pinned by hash: pkg/external-boot-image/Dockerfile.in:6","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:7","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:8","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:9","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:12","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:26","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:30","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:38","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:42","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:46","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:116: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:122","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:160","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:161","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:162","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:164: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:248: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:257","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:258","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:259","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:260","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:261","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:263","Warn: containerImage not pinned by hash: pkg/gpt-tools/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:40","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:46","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:53","Warn: containerImage not pinned by hash: pkg/guacd/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:6: pin your Docker image by updating lfedge/eve-rust:1.93.1-1 to lfedge/eve-rust:1.93.1-1@sha256:80324fd863a13478754ceb3d6290c348d064ca0381c763d5d5336b8b4e5e4ffb","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:10","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:13","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:16","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:20","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:31: pin your Docker image by updating lfedge/eve-debug:fd937fa82a11106e1c2fadee5f1cca338b5e0421 to lfedge/eve-debug:fd937fa82a11106e1c2fadee5f1cca338b5e0421@sha256:799e95a2f36a3bf9cf3f1db91981d412843edeb3e4913fae5ff1a71907b4aacc","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:34: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/ipxe/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/kdump/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/kexec/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/kube/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/measure-config/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/memory-monitor/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/mkconf/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/mkimage-iso-efi/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/mkimage-raw-efi/Dockerfile:8: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/mkrootfs-ext4/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/mkrootfs-squash/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:6: pin your Docker image by updating lfedge/eve-rust:1.93.1-1 to lfedge/eve-rust:1.93.1-1@sha256:80324fd863a13478754ceb3d6290c348d064ca0381c763d5d5336b8b4e5e4ffb","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:9","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:12","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:15","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:18","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:22","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:29","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:37","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:52: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/newlog/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/newlog/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/node-exporter/Dockerfile:4: pin your Docker image by updating prom/node-exporter:v1.9.1 to prom/node-exporter:v1.9.1@sha256:d00a542e409ee618a4edc67da14dd48c5da66726bbd5537ab2af9c1dfc442c8a","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:8: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:32","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:33","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:35","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:36","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:37","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:38","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:40","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:44","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:52","Warn: containerImage not pinned by hash: pkg/optee-client/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/optee-client/Dockerfile:47","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:15: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:20: pin your Docker image by updating lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e to lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e@sha256:ac276a7f2dc0343bd00ef31ea9ad6bf69474ba4465a4c3b6aef44f2988cd1803","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:24: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:29","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:33","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:37","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:46","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:47","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:49","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:51","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:52","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:53","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:56","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:13: pin your Docker image by updating lfedge/eve-uefi:382f2b44657fe57bb2c941c1571c0b27e5a9ddf0 to lfedge/eve-uefi:382f2b44657fe57bb2c941c1571c0b27e5a9ddf0@sha256:cf982a1970f38863f591e1fa9b12f3e0d7828494e33246a34575faf30a67fcc6","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:14: pin your Docker image by updating lfedge/eve-dom0-ztools:d5f5afd215f264447472b3bf329af23d67244662 to lfedge/eve-dom0-ztools:d5f5afd215f264447472b3bf329af23d67244662@sha256:3a8613a1f51b44545b56797507d292afd04d30981e635893c0d106329e30288b","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:26: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:32: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:37: pin your Docker image by updating lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e to lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e@sha256:ac276a7f2dc0343bd00ef31ea9ad6bf69474ba4465a4c3b6aef44f2988cd1803","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:41: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:50","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:54","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:67","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:68","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:70","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:71","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:74","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:138: pin your Docker image by updating lfedge/eve-fscrypt:083235be876f90d68625be8375c0a7eb73bb35d8 to lfedge/eve-fscrypt:083235be876f90d68625be8375c0a7eb73bb35d8@sha256:6de564d321a046ddc2f5fa932546502d6bc81993d7921c666a29df0aef5c2f03","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:139: pin your Docker image by updating lfedge/eve-gpt-tools:145a34616262e74a63c5c7b4ca5fcda1d1d4673f to lfedge/eve-gpt-tools:145a34616262e74a63c5c7b4ca5fcda1d1d4673f@sha256:729e5c8a71586e02c556511849a8d3756d89a840f3086cdc7499a79163fb45c3","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:144: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:151: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/pillar/vcom/api/builder/Dockerfile:5: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:310c62b5e7ca5b08167e4384c68db0fd2905dd9c7493756d356e893909057601","Warn: containerImage not pinned by hash: pkg/recovertpm/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/rngd/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/sources/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/storage-init/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:25","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:52","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:57","Warn: containerImage not pinned by hash: pkg/udev/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:23","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:36","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:47","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:72","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:74","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:83","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:25: pin your Docker image by updating lfedge/eve-rust:1.93.1-1 to lfedge/eve-rust:1.93.1-1@sha256:80324fd863a13478754ceb3d6290c348d064ca0381c763d5d5336b8b4e5e4ffb","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:28","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:38","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:42","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:65: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:6: pin your Docker image by updating lfedge/eve-dom0-ztools:d5f5afd215f264447472b3bf329af23d67244662 to lfedge/eve-dom0-ztools:d5f5afd215f264447472b3bf329af23d67244662@sha256:3a8613a1f51b44545b56797507d292afd04d30981e635893c0d106329e30288b","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:102: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:118","Warn: containerImage not pinned by hash: pkg/watchdog/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/wwan/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/xen-tools/Dockerfile:6: pin your Docker image by updating lfedge/eve-uefi:382f2b44657fe57bb2c941c1571c0b27e5a9ddf0 to lfedge/eve-uefi:382f2b44657fe57bb2c941c1571c0b27e5a9ddf0@sha256:cf982a1970f38863f591e1fa9b12f3e0d7828494e33246a34575faf30a67fcc6","Warn: containerImage not pinned by hash: pkg/xen-tools/Dockerfile:7: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/xen-tools/Dockerfile:23: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: pkg/xen/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95 to lfedge/eve-alpine:325b12087b386811fdb9d3c0adffa5fb94a34b95@sha256:3d94d0732b3579373889bb6c3f70c425a6446c62de322cc5b78e592ccd2c4b9e","Warn: containerImage not pinned by hash: tools/yetus/Dockerfile:8: pin your Docker image by updating ghcr.io/apache/yetus:0.15.1 to ghcr.io/apache/yetus:0.15.1@sha256:13076949f2f1807a8d6d83f4a29e8dbe43b1fccd96c3c213b0f2b28c2e09ec84","Warn: goCommand not pinned by hash: eve-tools/bpftrace-compiler/vendor/github.com/agext/levenshtein/test.sh:5","Warn: goCommand not pinned by hash: eve-tools/bpftrace-compiler/vendor/github.com/pelletier/go-toml/benchmark.sh:10","Warn: goCommand not pinned by hash: pkg/edgeview/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/installer/src/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/kube/update-component/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/newlog/vendor/github.com/json-iterator/go/build.sh:10","Warn: pipCommand not pinned by hash: pkg/pillar/debian/postinst:15","Warn: pipCommand not pinned by hash: pkg/pillar/debian/postinst:18","Warn: pipCommand not pinned by hash: pkg/pillar/debian/postinst:26","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.golint.sh:5","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:5","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:6","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:7","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:8","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:9","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/recovertpm/src/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/vtpm/swtpm-vtpm/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/wwan/mmagent/vendor/github.com/json-iterator/go/build.sh:10","Warn: pipCommand not pinned by hash: .github/workflows/commit-messages.yml:34","Info:  66 out of  66 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  28 third-party GitHubAction dependencies pinned","Info:   2 out of 206 containerImage dependencies pinned","Info:   6 out of  22 goCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#pinned-dependencies"}}]}