{"date":"2026-04-13","repo":{"name":"github.com/lf-edge/eve","commit":"f94dc1644b92898e81bd73442fa63168d4f96dc3"},"scorecard":{"version":"v5.4.1-0.20260408191012-81b380477e3b","commit":"81b380477e3be32cec5c824783bcf222978afafa"},"score":5.9,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/81b380477e3be32cec5c824783bcf222978afafa/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/81b380477e3be32cec5c824783bcf222978afafa/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/81b380477e3be32cec5c824783bcf222978afafa/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/81b380477e3be32cec5c824783bcf222978afafa/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/ascii-check.yml:26","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/ascii-check.yml:26","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/commit-messages.yml:25","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/commit-messages.yml:25","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/request_codeowners_review.yml:26","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/request_codeowners_review.yml:26","Warn: script injection with untrusted input ' github.event.comment.body ': .github/workflows/rerun-ci.yml:42","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/spdx.yml:27","Warn: script injection with untrusted input ' github.event.pull_request.head.ref ': .github/workflows/spdx.yml:27"],"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/81b380477e3be32cec5c824783bcf222978afafa/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:123","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:167","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:71","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build-alpine-base.yml:97","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-cross-compilers.yml:30","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-cross-compilers.yml:78","Info: jobLevel 'contents' permission set to 'read': .github/workflows/buildyetusondemand.yml:29","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:38","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:39","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/rerun-ci.yml:17","Info: jobLevel 'issues' permission set to 'read': .github/workflows/rerun-ci.yml:18","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/rerun-ci.yml:19","Info: jobLevel 'contents' permission set to 'read': .github/workflows/rerun-ci.yml:20","Warn: no topLevel permission defined: .github/workflows/actionlint.yml:1","Warn: no topLevel permission defined: .github/workflows/ascii-check.yml:1","Warn: no topLevel permission defined: .github/workflows/assets.yml:1","Info: found token with 'none' permissions: .github/workflows/build-alpine-base.yml:1","Info: found token with 'none' permissions: .github/workflows/build-cross-compilers.yml:1","Warn: no topLevel permission defined: .github/workflows/build-eve.yml:1","Warn: no topLevel permission defined: .github/workflows/build.yml:1","Warn: no topLevel permission defined: .github/workflows/buildondemand.yml:1","Info: found token with 'none' permissions: .github/workflows/buildyetusondemand.yml:1","Warn: no topLevel permission defined: .github/workflows/check-docker-hashes-consistency.yml:1","Warn: no topLevel permission defined: .github/workflows/close-master-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Warn: no topLevel permission defined: .github/workflows/commit-messages.yml:1","Warn: no topLevel permission defined: .github/workflows/cve-scan.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/eden-trusted.yml:12","Info: topLevel 'actions' permission set to 'read': .github/workflows/eden-trusted.yml:13","Warn: topLevel 'statuses' permission set to 'write': .github/workflows/eden-trusted.yml:14","Warn: no topLevel permission defined: .github/workflows/fuzz-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/go-tests.yml:1","Info: topLevel 'actions' permission set to 'read': .github/workflows/osv-scanner.yml:30","Warn: topLevel 'security-events' permission set to 'write': .github/workflows/osv-scanner.yml:32","Info: topLevel 'contents' permission set to 'read': .github/workflows/osv-scanner.yml:34","Warn: no topLevel permission defined: .github/workflows/pr-gate.yml:1","Warn: no topLevel permission defined: .github/workflows/publish.yml:1","Warn: no topLevel permission defined: .github/workflows/request_codeowners_review.yml:1","Warn: no topLevel permission defined: .github/workflows/rerun-ci.yml:1","Warn: no topLevel permission defined: .github/workflows/spdx.yml:1","Warn: no topLevel permission defined: .github/workflows/yetus.yml:1","Info: found token with 'none' permissions: .github/workflows/zizmor.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/81b380477e3be32cec5c824783bcf222978afafa/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/81b380477e3be32cec5c824783bcf222978afafa/docs/checks.md#license"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/build-cross-compilers.yml:26"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/81b380477e3be32cec5c824783bcf222978afafa/docs/checks.md#packaging"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/ioBundleTree_test.go:297","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/ioBundleTree_test.go:401","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/ruleengine_test.go:303","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/usbcontroller_test.go:571","Info: GoBuiltInFuzzer integration found: pkg/pillar/controllerconn/resolver_test.go:387","Info: GoBuiltInFuzzer integration found: pkg/pillar/types/assignableadapters_test.go:584"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/81b380477e3be32cec5c824783bcf222978afafa/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Warn: codeowners review is not required on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/81b380477e3be32cec5c824783bcf222978afafa/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 16.12.0 not signed: https://api.github.com/repos/lf-edge/eve/releases/309019853","Warn: release artifact 16.11.0 not signed: https://api.github.com/repos/lf-edge/eve/releases/298489881","Warn: release artifact 16.10.0 not signed: https://api.github.com/repos/lf-edge/eve/releases/292966409","Warn: release artifact 16.9.0 not signed: https://api.github.com/repos/lf-edge/eve/releases/292560474","Warn: release artifact 16.8.0 not signed: https://api.github.com/repos/lf-edge/eve/releases/287336255","Warn: release artifact 16.12.0 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/309019853","Warn: release artifact 16.11.0 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/298489881","Warn: release artifact 16.10.0 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/292966409","Warn: release artifact 16.9.0 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/292560474","Warn: release artifact 16.8.0 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/287336255"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/81b380477e3be32cec5c824783bcf222978afafa/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: pkg/uefi/rpi/start4.elf:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/81b380477e3be32cec5c824783bcf222978afafa/docs/checks.md#binary-artifacts"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/81b380477e3be32cec5c824783bcf222978afafa/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/cve-scan.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/cve-scan.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:221: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:208: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:318: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/publish.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/yetus.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/yetus.yml/master?enable=pin","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:27: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:55ae5d250caebc548793f321534bc6a8ef1d116f334f18f4ada1b2daad3251b2","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:57","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:77","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:97: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:55ae5d250caebc548793f321534bc6a8ef1d116f334f18f4ada1b2daad3251b2","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:103","Warn: containerImage not pinned by hash: build-tools/src/scripts/Dockerfile:2: pin your Docker image by updating golang:1.20.1-alpine to golang:1.20.1-alpine@sha256:87d0a3309b34e2ca732efd69fb899d3c420d3382370fd6e7e6d2cb5c930f27f9","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/Dockerfile:4: pin your Docker image by updating alpine:3.21 to alpine:3.21@sha256:c3f8e73fdb79deaebaa2037150150191b9dcbfba68b4a46d70103204c53f4709","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/root/Dockerfile:6","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/root/Dockerfile:8: pin your Docker image by updating lfedge/eve-bpftrace:c08d714db34b7cde90d20c56e74d2c11afe483df to lfedge/eve-bpftrace:c08d714db34b7cde90d20c56e74d2c11afe483df@sha256:9f69a1bb88784fab3e17b63194ce92aa94b3033193c87a2a3befb4eca5225d6a","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/root/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:745ae9066273c73b0fd879c4ba4ff626a8392d04 to lfedge/eve-alpine:745ae9066273c73b0fd879c4ba4ff626a8392d04@sha256:0b4c3e13e502c14425d76d05b9fafb1efe25e81fb6f83698c243e5edabb41582","Warn: containerImage not pinned by hash: pkg/alpine-base/Dockerfile:4: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:55ae5d250caebc548793f321534bc6a8ef1d116f334f18f4ada1b2daad3251b2","Warn: containerImage not pinned by hash: pkg/alpine/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine-base:77cc1495c875b7468dbf4123210abf86a1ffb852-07a6e7df6 to lfedge/eve-alpine-base:77cc1495c875b7468dbf4123210abf86a1ffb852-07a6e7df6@sha256:46e5bc76898b43a1ca964d9809a3ed0eee3a23b576a82f7f2f6dcaa3672b470d","Warn: containerImage not pinned by hash: pkg/alpine/Dockerfile:43: pin your Docker image by updating lfedge/eve-alpine-base:77cc1495c875b7468dbf4123210abf86a1ffb852-07a6e7df6 to lfedge/eve-alpine-base:77cc1495c875b7468dbf4123210abf86a1ffb852-07a6e7df6@sha256:46e5bc76898b43a1ca964d9809a3ed0eee3a23b576a82f7f2f6dcaa3672b470d","Warn: containerImage not pinned by hash: pkg/alpine/Dockerfile:73","Warn: containerImage not pinned by hash: pkg/apparmor/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/bpftrace/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/bpftrace/Dockerfile:58","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:10: pin your Docker image by updating lfedge/eve-optee-os:1787c77ff84c8c4d2dc5060a6d12f839b0a285ee to lfedge/eve-optee-os:1787c77ff84c8c4d2dc5060a6d12f839b0a285ee@sha256:17cae32df7c10c6e8e4e728e9963f0fc2dd67a756464df7c7e36c3b08f1826bd","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:18: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:23: pin your Docker image by updating lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e to lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e@sha256:ac276a7f2dc0343bd00ef31ea9ad6bf69474ba4465a4c3b6aef44f2988cd1803","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:27: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:32","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:36","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:40","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:49","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:50","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:51","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:53","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:54","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:55","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:58","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:108","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:109","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:110","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:114: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:117","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:11: pin your Docker image by updating lfedge/eve-recovertpm:b8e2d39a50db29889a8ea2f40a920472b6e73cca to lfedge/eve-recovertpm:b8e2d39a50db29889a8ea2f40a920472b6e73cca@sha256:509598a815a5f4267b64449bd0336f75448739bdf6c743d24d3834684f60f23e","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:12: pin your Docker image by updating lfedge/eve-bpftrace:71764d771e56a79b4af10a36d34d62e1981174c4 to lfedge/eve-bpftrace:71764d771e56a79b4af10a36d34d62e1981174c4@sha256:d3dcd56d7b24ba25882b262e76862838e2200841f0addd226aa003afc4474df1","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:82","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile.spec:1: pin your Docker image by updating lfedge/eve-alpine:745ae9066273c73b0fd879c4ba4ff626a8392d04 to lfedge/eve-alpine:745ae9066273c73b0fd879c4ba4ff626a8392d04@sha256:0b4c3e13e502c14425d76d05b9fafb1efe25e81fb6f83698c243e5edabb41582","Warn: containerImage not pinned by hash: pkg/dnsmasq/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/dnsmasq/Dockerfile:28","Warn: containerImage not pinned by hash: pkg/dom0-ztools/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/edgeview/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:6","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:8","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:10","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:12","Warn: containerImage not pinned by hash: pkg/external-boot-image/Dockerfile.in:4","Warn: containerImage not pinned by hash: pkg/external-boot-image/Dockerfile.in:6","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:7","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:8","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:9","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:12","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:24","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:28","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:32","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:36","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:40","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:99: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:102","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:136","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:137","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:138","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:140: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:218: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:222","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:223","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:224","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:225","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:227","Warn: containerImage not pinned by hash: pkg/gpt-tools/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:40","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:46","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:53","Warn: containerImage not pinned by hash: pkg/guacd/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:6: pin your Docker image by updating lfedge/eve-rust:1.93.1 to lfedge/eve-rust:1.93.1@sha256:8b4c441ebb2ce622493915f853ac26f6571f4bc2fab17669f3230fe1e5216e96","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:10","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:13","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:16","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:20","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:31: pin your Docker image by updating lfedge/eve-debug:9e8c1c103b275e54537924c65aa3da622e4c09a1 to lfedge/eve-debug:9e8c1c103b275e54537924c65aa3da622e4c09a1@sha256:d8ba0d6784dd130fca3eb138e6d66a87effc6d170d88eedeb0f29a6fd81b424a","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:34: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/ipxe/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/kdump/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/kexec/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/kube/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/measure-config/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/memory-monitor/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/mkconf/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/mkimage-iso-efi/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/mkimage-raw-efi/Dockerfile:8: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/mkrootfs-ext4/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/mkrootfs-squash/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:6: pin your Docker image by updating lfedge/eve-rust:1.93.1 to lfedge/eve-rust:1.93.1@sha256:8b4c441ebb2ce622493915f853ac26f6571f4bc2fab17669f3230fe1e5216e96","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:9","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:12","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:15","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:18","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:22","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:29","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:37","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:52: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/newlog/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/node-exporter/Dockerfile:4: pin your Docker image by updating prom/node-exporter:v1.9.1 to prom/node-exporter:v1.9.1@sha256:d00a542e409ee618a4edc67da14dd48c5da66726bbd5537ab2af9c1dfc442c8a","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:8: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:30","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:32","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:33","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:35","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:37","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:41","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:45","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:15: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:20: pin your Docker image by updating lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e to lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e@sha256:ac276a7f2dc0343bd00ef31ea9ad6bf69474ba4465a4c3b6aef44f2988cd1803","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:24: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:29","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:33","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:37","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:46","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:47","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:49","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:51","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:52","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:53","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:56","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:13: pin your Docker image by updating lfedge/eve-uefi:08cb53bb347ac5da6752c5136543ff75af25486d to lfedge/eve-uefi:08cb53bb347ac5da6752c5136543ff75af25486d@sha256:29e90ee0014946a087dbbda5b58ff3854991d074f23d93387fd099ce0dd4f380","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:14: pin your Docker image by updating lfedge/eve-dom0-ztools:a6d70d175f7a129bef5d1cac2aea9db637e3f839 to lfedge/eve-dom0-ztools:a6d70d175f7a129bef5d1cac2aea9db637e3f839@sha256:217b85a464a75822e2caea32e30ffd7a351cf7a672e9691e43ad443807d602fa","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:26: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:31: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:36: pin your Docker image by updating lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e to lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e@sha256:ac276a7f2dc0343bd00ef31ea9ad6bf69474ba4465a4c3b6aef44f2988cd1803","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:40: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:47","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:49","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:53","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:61","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:62","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:64","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:65","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:68","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:151: pin your Docker image by updating lfedge/eve-fscrypt:2c0a31f72c87233b31f9bc2fa166f18839484649 to lfedge/eve-fscrypt:2c0a31f72c87233b31f9bc2fa166f18839484649@sha256:4a18dd56517ab07a69a640b58567be157cc3418ec93b8b5d14414e730875d3ec","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:152: pin your Docker image by updating lfedge/eve-dnsmasq:f5a9c3cbb477cfc8b386bea4f7e743eb1c25833a to lfedge/eve-dnsmasq:f5a9c3cbb477cfc8b386bea4f7e743eb1c25833a@sha256:06b51c98ec933e3fcd5e5969adff37dbbf10d1c40562bc75c9b125fd8deaf13e","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:153: pin your Docker image by updating lfedge/eve-gpt-tools:e29df0ac2b84b121b5f11455d68edffeb4c97c61 to lfedge/eve-gpt-tools:e29df0ac2b84b121b5f11455d68edffeb4c97c61@sha256:46e567295c00565e776732b63a62f44fed43735b234f678af2cdd6e4ce2b2e1e","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:158: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/pillar/vcom/api/builder/Dockerfile:5: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:55ae5d250caebc548793f321534bc6a8ef1d116f334f18f4ada1b2daad3251b2","Warn: containerImage not pinned by hash: pkg/recovertpm/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/rngd/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/sources/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/storage-init/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:25","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:52","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:57","Warn: containerImage not pinned by hash: pkg/udev/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:21","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:29","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:45","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:47","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:49","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:58","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:25: pin your Docker image by updating lfedge/eve-rust:1.93.1 to lfedge/eve-rust:1.93.1@sha256:8b4c441ebb2ce622493915f853ac26f6571f4bc2fab17669f3230fe1e5216e96","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:28","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:38","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:42","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:66: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:6: pin your Docker image by updating lfedge/eve-dom0-ztools:a6d70d175f7a129bef5d1cac2aea9db637e3f839 to lfedge/eve-dom0-ztools:a6d70d175f7a129bef5d1cac2aea9db637e3f839@sha256:217b85a464a75822e2caea32e30ffd7a351cf7a672e9691e43ad443807d602fa","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:7: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/watchdog/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/wwan/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/xen-tools/Dockerfile:6: pin your Docker image by updating lfedge/eve-uefi:08cb53bb347ac5da6752c5136543ff75af25486d to lfedge/eve-uefi:08cb53bb347ac5da6752c5136543ff75af25486d@sha256:29e90ee0014946a087dbbda5b58ff3854991d074f23d93387fd099ce0dd4f380","Warn: containerImage not pinned by hash: pkg/xen-tools/Dockerfile:7: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/xen-tools/Dockerfile:23: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/xen/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: tools/yetus/Dockerfile:8: pin your Docker image by updating ghcr.io/apache/yetus:0.15.1 to ghcr.io/apache/yetus:0.15.1@sha256:13076949f2f1807a8d6d83f4a29e8dbe43b1fccd96c3c213b0f2b28c2e09ec84","Warn: goCommand not pinned by hash: pkg/edgeview/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/installer/src/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/kube/update-component/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/newlog/vendor/github.com/json-iterator/go/build.sh:10","Warn: pipCommand not pinned by hash: pkg/pillar/debian/postinst:15","Warn: pipCommand not pinned by hash: pkg/pillar/debian/postinst:18","Warn: pipCommand not pinned by hash: pkg/pillar/debian/postinst:26","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.golint.sh:5","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:5","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:6","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:7","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:8","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:9","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/recovertpm/src/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/vtpm/swtpm-vtpm/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/wwan/mmagent/vendor/github.com/json-iterator/go/build.sh:10","Warn: pipCommand not pinned by hash: .github/workflows/commit-messages.yml:34","Info:  51 out of  51 GitHub-owned GitHubAction dependencies pinned","Info:  21 out of  28 third-party GitHubAction dependencies pinned","Info:   2 out of 196 containerImage dependencies pinned","Info:   6 out of  20 goCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/81b380477e3be32cec5c824783bcf222978afafa/docs/checks.md#pinned-dependencies"}}]}