{"date":"2026-07-13","repo":{"name":"github.com/lf-edge/eve","commit":"97349e2ff91dd028920e2eac59c9c8727559ad73"},"scorecard":{"version":"v5.5.1-0.20260519155427-916bfc57fa74","commit":"916bfc57fa7431467a33a5a013cba3f8a0c1ec50"},"score":5.9,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/ascii-check.yml:26","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/ascii-check.yml:26","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/commit-messages.yml:25","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/commit-messages.yml:25","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/request_codeowners_review.yml:26","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/request_codeowners_review.yml:26","Warn: script injection with untrusted input ' github.event.comment.body ': .github/workflows/rerun-ci.yml:42","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/spdx.yml:27","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/spdx.yml:27"],"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#license"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/build-cross-compilers.yml:26"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:71","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build-alpine-base.yml:97","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:123","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:167","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-cross-compilers.yml:30","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-cross-compilers.yml:78","Info: jobLevel 'contents' permission set to 'read': .github/workflows/buildyetusondemand.yml:29","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:38","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:39","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/rerun-ci.yml:19","Info: jobLevel 'contents' permission set to 'read': .github/workflows/rerun-ci.yml:20","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/rerun-ci.yml:17","Info: jobLevel 'issues' permission set to 'read': .github/workflows/rerun-ci.yml:18","Info: topLevel 'contents' permission set to 'read': .github/workflows/actionlint.yml:16","Warn: topLevel 'checks' permission set to 'write': .github/workflows/actionlint.yml:17","Warn: no topLevel permission defined: .github/workflows/ascii-check.yml:1","Warn: no topLevel permission defined: .github/workflows/assets.yml:1","Info: found token with 'none' permissions: .github/workflows/build-alpine-base.yml:1","Info: found token with 'none' permissions: .github/workflows/build-cross-compilers.yml:1","Warn: no topLevel permission defined: .github/workflows/build.yml:1","Warn: no topLevel permission defined: .github/workflows/buildondemand.yml:1","Info: found token with 'none' permissions: .github/workflows/buildyetusondemand.yml:1","Warn: no topLevel permission defined: .github/workflows/check-docker-hashes-consistency.yml:1","Warn: no topLevel permission defined: .github/workflows/check-pubsub-persistence.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/claude-review.yml:14","Warn: no topLevel permission defined: .github/workflows/close-master-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Warn: no topLevel permission defined: .github/workflows/commit-messages.yml:1","Warn: no topLevel permission defined: .github/workflows/cve-scan.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/eden-trusted.yml:12","Info: topLevel 'actions' permission set to 'read': .github/workflows/eden-trusted.yml:13","Warn: topLevel 'statuses' permission set to 'write': .github/workflows/eden-trusted.yml:14","Warn: no topLevel permission defined: .github/workflows/fuzz-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/go-tests.yml:1","Info: topLevel 'actions' permission set to 'read': .github/workflows/osv-scanner.yml:30","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/osv-scanner.yml:32","Info: topLevel 'contents' permission set to 'read': .github/workflows/osv-scanner.yml:34","Warn: no topLevel permission defined: .github/workflows/pr-gate.yml:1","Warn: no topLevel permission defined: .github/workflows/publish.yml:1","Warn: no topLevel permission defined: .github/workflows/request_codeowners_review.yml:1","Warn: no topLevel permission defined: .github/workflows/rerun-ci.yml:1","Warn: no topLevel permission defined: .github/workflows/rust-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/sbom-coverage-check.yml:1","Warn: no topLevel permission defined: .github/workflows/spdx.yml:1","Warn: no topLevel permission defined: .github/workflows/yetus.yml:1","Info: found token with 'none' permissions: .github/workflows/zizmor.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/ioBundleTree_test.go:297","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/ioBundleTree_test.go:401","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/ruleengine_test.go:303","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/usbcontroller_test.go:571","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/zedagent/parseconfig_test.go:2622","Info: GoBuiltInFuzzer integration found: pkg/pillar/types/assignableadapters_test.go:660"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Warn: codeowners review is not required on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 17.0.0-rc4 not signed: https://api.github.com/repos/lf-edge/eve/releases/354067836","Warn: release artifact 17.1.0 not signed: https://api.github.com/repos/lf-edge/eve/releases/351740938","Warn: release artifact 17.0.0-rc3 not signed: https://api.github.com/repos/lf-edge/eve/releases/347704200","Warn: release artifact 14.5.5-lts not signed: https://api.github.com/repos/lf-edge/eve/releases/344318058","Warn: release artifact 14.5.5-rc1 not signed: https://api.github.com/repos/lf-edge/eve/releases/340345990","Warn: release artifact 17.0.0-rc4 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/354067836","Warn: release artifact 17.1.0 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/351740938","Warn: release artifact 17.0.0-rc3 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/347704200","Warn: release artifact 14.5.5-lts does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/344318058","Warn: release artifact 14.5.5-rc1 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/340345990"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#signed-releases"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#sast"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: pkg/uefi/rpi/start4.elf:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/claude-review.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/claude-review.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cve-scan.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/cve-scan.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:208: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:221: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:305: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/publish.yml/master?enable=pin","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:27: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:14358309a308569c32bdc37e2e0e9694be33a9d99e68afb0f5ff33cc1f695dce","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:57","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:77","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:97: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:14358309a308569c32bdc37e2e0e9694be33a9d99e68afb0f5ff33cc1f695dce","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:103","Warn: containerImage not pinned by hash: build-tools/src/scripts/Dockerfile:5: pin your Docker image by updating golang:1.25.11-alpine3.22 to golang:1.25.11-alpine3.22@sha256:65b4400aee0927412e9ed791a11893273a49d55df24841f7599660fb80dae464","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/Dockerfile:4: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:14358309a308569c32bdc37e2e0e9694be33a9d99e68afb0f5ff33cc1f695dce","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/root/Dockerfile:6","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/root/Dockerfile:8: pin your Docker image by updating lfedge/eve-bpftrace:44a21d005fa06c52d34e5f0e5073db3268d5e212 to lfedge/eve-bpftrace:44a21d005fa06c52d34e5f0e5073db3268d5e212@sha256:1049f90368975752c7eb997b58741ca5da0ebd2e0a226547761b2a0422077029","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/root/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: evetest/Dockerfile.broker:10: pin your Docker image by updating golang:1.25-alpine3.21 to golang:1.25-alpine3.21@sha256:b4dbd292a0852331c89dfd64e84d16811f3e3aae4c73c13d026c4d200715aff6","Warn: containerImage not pinned by hash: evetest/Dockerfile.broker:45: pin your Docker image by updating alpine:3.21 to alpine:3.21@sha256:48b0309ca019d89d40f670aa1bc06e426dc0931948452e8491e3d65087abc07d","Warn: containerImage not pinned by hash: evetest/Dockerfile.evetest:13: pin your Docker image by updating lfedge/adam:0.0.75 to lfedge/adam:0.0.75@sha256:3f21996169261388ac685245068b4438c98c81f26fe68d6d69ab394582b1de8b","Warn: containerImage not pinned by hash: evetest/Dockerfile.evetest:23: pin your Docker image by updating golang:1.25-alpine3.21 to golang:1.25-alpine3.21@sha256:b4dbd292a0852331c89dfd64e84d16811f3e3aae4c73c13d026c4d200715aff6","Warn: containerImage not pinned by hash: evetest/Dockerfile.evetest:57: pin your Docker image by updating golang:1.25-alpine3.21 to golang:1.25-alpine3.21@sha256:b4dbd292a0852331c89dfd64e84d16811f3e3aae4c73c13d026c4d200715aff6","Warn: containerImage not pinned by hash: evetest/protobuilder/Dockerfile:5: pin your Docker image by updating golang:1.24-alpine to golang:1.24-alpine@sha256:8bee1901f1e530bfb4a7850aa7a479d17ae3a18beb6e09064ed54cfd245b7191","Warn: containerImage not pinned by hash: evetest/sdn/vm/Dockerfile:15: pin your Docker image by updating golang:1.25-alpine3.21 to golang:1.25-alpine3.21@sha256:b4dbd292a0852331c89dfd64e84d16811f3e3aae4c73c13d026c4d200715aff6","Warn: containerImage not pinned by hash: evetest/sdn/vm/Dockerfile:62: pin your Docker image by updating alpine:3.21 to alpine:3.21@sha256:48b0309ca019d89d40f670aa1bc06e426dc0931948452e8491e3d65087abc07d","Warn: containerImage not pinned by hash: evetest/sdn/vm/Dockerfile.vm:1: pin your Docker image by updating lfedge/eve-alpine:12.1.0 to lfedge/eve-alpine:12.1.0@sha256:4256090fe27ea1c10cbf0850a1cfa7c84e365b676fc40b187a98a27a28b6f103","Warn: containerImage not pinned by hash: evetest/sdn/vm/Dockerfile.vm:6: pin your Docker image by updating lfedge/eve-alpine:12.1.0 to lfedge/eve-alpine:12.1.0@sha256:4256090fe27ea1c10cbf0850a1cfa7c84e365b676fc40b187a98a27a28b6f103","Warn: containerImage not pinned by hash: evetest/testapps/lps/Dockerfile:5: pin your Docker image by updating golang:1.24 to golang:1.24@sha256:d2d2bc1c84f7e60d7d2438a3836ae7d0c847f4888464e7ec9ba3a1339a1ee804","Warn: containerImage not pinned by hash: evetest/testapps/lps/Dockerfile:18: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:4fbb8e6a8395de5a7550b33509421a2bafbc0aab6c06ba2cef9ebffbc7092d90","Warn: containerImage not pinned by hash: evetest/testapps/ubuntu-ctr/Dockerfile:4: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:4fbb8e6a8395de5a7550b33509421a2bafbc0aab6c06ba2cef9ebffbc7092d90","Warn: containerImage not pinned by hash: pkg/alpine-base/Dockerfile:4: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:14358309a308569c32bdc37e2e0e9694be33a9d99e68afb0f5ff33cc1f695dce","Warn: containerImage not pinned by hash: pkg/alpine/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:1f744180283ffb4eabcc3862531aeacf1de886b3 to lfedge/eve-alpine:1f744180283ffb4eabcc3862531aeacf1de886b3@sha256:b43826c5e706594322f145700cf728e5af2400271cc09235afd9300781220f6d","Warn: containerImage not pinned by hash: pkg/alpine/Dockerfile:46: pin your Docker image by updating lfedge/eve-alpine-base:77cc1495c875b7468dbf4123210abf86a1ffb852-07a6e7df6 to lfedge/eve-alpine-base:77cc1495c875b7468dbf4123210abf86a1ffb852-07a6e7df6@sha256:46e5bc76898b43a1ca964d9809a3ed0eee3a23b576a82f7f2f6dcaa3672b470d","Warn: containerImage not pinned by hash: pkg/alpine/Dockerfile:76","Warn: containerImage not pinned by hash: pkg/alpine/dnstest/Dockerfile:4","Warn: containerImage not pinned by hash: pkg/apparmor/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/bpftrace/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/bpftrace/Dockerfile:81","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:10: pin your Docker image by updating lfedge/eve-optee-os:49e5e408f4871941fe7d62948bba60fd7e332f1f to lfedge/eve-optee-os:49e5e408f4871941fe7d62948bba60fd7e332f1f@sha256:5061a60f21584292834de80387b1ef75a8080216b058a0409b5376f06fd44c9c","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:18: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:23: pin your Docker image by updating lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e to lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e@sha256:ac276a7f2dc0343bd00ef31ea9ad6bf69474ba4465a4c3b6aef44f2988cd1803","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:27: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:32","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:36","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:40","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:49","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:50","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:51","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:53","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:54","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:55","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:58","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:108","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:109","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:110","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:114: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:117","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:11: pin your Docker image by updating lfedge/eve-recovertpm:05687ec09f5beb9d1d76d0529fbc0aa54993d21c to lfedge/eve-recovertpm:05687ec09f5beb9d1d76d0529fbc0aa54993d21c@sha256:0a658302903d7a2988e8db1d2eea9a200dd186ccd1eb690c5b675908850b8588","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:12: pin your Docker image by updating lfedge/eve-bpftrace:44a21d005fa06c52d34e5f0e5073db3268d5e212 to lfedge/eve-bpftrace:44a21d005fa06c52d34e5f0e5073db3268d5e212@sha256:1049f90368975752c7eb997b58741ca5da0ebd2e0a226547761b2a0422077029","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:91","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile.spec:1: pin your Docker image by updating lfedge/eve-alpine:47d267f35e4832f639bf65bbe8a2e7b2f31e3e36 to lfedge/eve-alpine:47d267f35e4832f639bf65bbe8a2e7b2f31e3e36@sha256:17e751f8b367df8d60b86112bdf89eb2005b02fd24573934c314a7a633a11643","Warn: containerImage not pinned by hash: pkg/dom0-ztools/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/edgeview/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/edgeview/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:1: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:6","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:8","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:10","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:12","Warn: containerImage not pinned by hash: pkg/external-boot-image/Dockerfile.in:4","Warn: containerImage not pinned by hash: pkg/external-boot-image/Dockerfile.in:6","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:7","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:8","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:9","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:12","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:26","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:30","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:38","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:42","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:125: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:131","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:169","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:170","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:171","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:173: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:257: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:266","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:267","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:268","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:269","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:271","Warn: containerImage not pinned by hash: pkg/gpt-tools/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:40","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:46","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:53","Warn: containerImage not pinned by hash: pkg/guacd/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:6: pin your Docker image by updating lfedge/eve-rust:1.93.1-1 to lfedge/eve-rust:1.93.1-1@sha256:80324fd863a13478754ceb3d6290c348d064ca0381c763d5d5336b8b4e5e4ffb","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:10","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:13","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:16","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:20","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:31: pin your Docker image by updating lfedge/eve-debug:dfe86811a844dc212800f2346f95bc200bc1637a to lfedge/eve-debug:dfe86811a844dc212800f2346f95bc200bc1637a@sha256:28f9bc7753c7776f040da55f358fec9c031be3fb93dc6bdb3f8adff180e90458","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:34: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/ipxe/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/kdump/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/kexec/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/kube/Dockerfile:22: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/measure-config/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/memory-monitor/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/mkconf/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/mkimage-iso-efi/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/mkimage-raw-efi/Dockerfile:8: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/mkrootfs-ext4/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/mkrootfs-squash/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:7: pin your Docker image by updating lfedge/eve-rust:1.93.1-1 to lfedge/eve-rust:1.93.1-1@sha256:80324fd863a13478754ceb3d6290c348d064ca0381c763d5d5336b8b4e5e4ffb","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:10","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:13","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:16","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:21","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:24","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:39","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:56: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/newlog/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/newlog/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/node-exporter/Dockerfile:4: pin your Docker image by updating prom/node-exporter:v1.9.1 to prom/node-exporter:v1.9.1@sha256:d00a542e409ee618a4edc67da14dd48c5da66726bbd5537ab2af9c1dfc442c8a","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:8: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:32","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:33","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:35","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:36","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:37","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:38","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:40","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:44","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:52","Warn: containerImage not pinned by hash: pkg/optee-client/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/optee-client/Dockerfile:47","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:15: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:20: pin your Docker image by updating lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e to lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e@sha256:ac276a7f2dc0343bd00ef31ea9ad6bf69474ba4465a4c3b6aef44f2988cd1803","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:24: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:29","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:33","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:37","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:46","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:47","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:49","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:51","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:52","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:53","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:56","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:13: pin your Docker image by updating lfedge/eve-uefi:849c3926f4680b9012cadb9c8116dae86cbbad23 to lfedge/eve-uefi:849c3926f4680b9012cadb9c8116dae86cbbad23@sha256:a09436b1bed5ed8944ee008dce1defdbd4ee154af5280a7322a835896a9ed5f0","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:14: pin your Docker image by updating lfedge/eve-dom0-ztools:3ff77686289c31329cc536f31d268ddd777bffb4 to lfedge/eve-dom0-ztools:3ff77686289c31329cc536f31d268ddd777bffb4@sha256:3f89c0acfe9fd7c8f2a31799e335942a918bc3c240a5025d8693f7d2c25ce1dc","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:26: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:32: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:37: pin your Docker image by updating lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e to lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e@sha256:ac276a7f2dc0343bd00ef31ea9ad6bf69474ba4465a4c3b6aef44f2988cd1803","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:41: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:50","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:54","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:67","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:68","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:70","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:71","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:74","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:150: pin your Docker image by updating lfedge/eve-fscrypt:0dd2ac10c7085f60e5b141fecd5210517495f6bc to lfedge/eve-fscrypt:0dd2ac10c7085f60e5b141fecd5210517495f6bc@sha256:dd12402459904b64b39fe32e8e4ab1f2f2ec05be006fa418896fa197af5c6aab","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:151: pin your Docker image by updating lfedge/eve-gpt-tools:956a746b8cb504331313783535d7ff0206f528e1 to lfedge/eve-gpt-tools:956a746b8cb504331313783535d7ff0206f528e1@sha256:fb0b90b1b143eea99ad99544b21e21d6d9fe634f2eea392711015e00bb0c4051","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:156: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:163: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/pillar/vcom/api/builder/Dockerfile:5: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:14358309a308569c32bdc37e2e0e9694be33a9d99e68afb0f5ff33cc1f695dce","Warn: containerImage not pinned by hash: pkg/recovertpm/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/rngd/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/sources/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/storage-init/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:25","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:27","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:85","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:89","Warn: containerImage not pinned by hash: pkg/udev/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:23","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:36","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:47","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:72","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:74","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:83","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:25: pin your Docker image by updating lfedge/eve-rust:1.93.1-1 to lfedge/eve-rust:1.93.1-1@sha256:80324fd863a13478754ceb3d6290c348d064ca0381c763d5d5336b8b4e5e4ffb","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:28","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:38","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:42","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:65: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:6: pin your Docker image by updating lfedge/eve-dom0-ztools:3ff77686289c31329cc536f31d268ddd777bffb4 to lfedge/eve-dom0-ztools:3ff77686289c31329cc536f31d268ddd777bffb4@sha256:3f89c0acfe9fd7c8f2a31799e335942a918bc3c240a5025d8693f7d2c25ce1dc","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:102: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:118","Warn: containerImage not pinned by hash: pkg/watchdog/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/wwan/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/xen-tools/Dockerfile:6: pin your Docker image by updating lfedge/eve-uefi:849c3926f4680b9012cadb9c8116dae86cbbad23 to lfedge/eve-uefi:849c3926f4680b9012cadb9c8116dae86cbbad23@sha256:a09436b1bed5ed8944ee008dce1defdbd4ee154af5280a7322a835896a9ed5f0","Warn: containerImage not pinned by hash: pkg/xen-tools/Dockerfile:7: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/xen-tools/Dockerfile:23: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: pkg/xen/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e to lfedge/eve-alpine:f9b45a5a3b3a18a8503cbe6d1258a1025450fe0e@sha256:4e471591ac89719a508ba3448938a6843f4b22a715ca700c50cb903ffc8792f3","Warn: containerImage not pinned by hash: tools/yetus/Dockerfile:8: pin your Docker image by updating ghcr.io/apache/yetus:0.15.1 to ghcr.io/apache/yetus:0.15.1@sha256:13076949f2f1807a8d6d83f4a29e8dbe43b1fccd96c3c213b0f2b28c2e09ec84","Warn: goCommand not pinned by hash: eve-tools/bpftrace-compiler/vendor/github.com/agext/levenshtein/test.sh:5","Warn: goCommand not pinned by hash: eve-tools/bpftrace-compiler/vendor/github.com/pelletier/go-toml/benchmark.sh:10","Warn: goCommand not pinned by hash: pkg/edgeview/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/installer/src/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/kube/update-component/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/newlog/vendor/github.com/json-iterator/go/build.sh:10","Warn: pipCommand not pinned by hash: pkg/pillar/debian/postinst:15","Warn: pipCommand not pinned by hash: pkg/pillar/debian/postinst:18","Warn: pipCommand not pinned by hash: pkg/pillar/debian/postinst:26","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.golint.sh:5","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:5","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:6","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:7","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:8","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:9","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/recovertpm/src/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/vtpm/swtpm-vtpm/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/wwan/mmagent/vendor/github.com/json-iterator/go/build.sh:10","Warn: pipCommand not pinned by hash: .github/workflows/commit-messages.yml:34","Info:  70 out of  70 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  28 third-party GitHubAction dependencies pinned","Info:   3 out of 218 containerImage dependencies pinned","Info:   6 out of  22 goCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/916bfc57fa7431467a33a5a013cba3f8a0c1ec50/docs/checks.md#pinned-dependencies"}}]}