{"date":"2026-08-24","repo":{"name":"github.com/lf-edge/eve","commit":"2177a1354055b3072e02597f79d1147c2a281aa8"},"scorecard":{"version":"v5.5.1-0.20260815060127-d1fab88f5463","commit":"d1fab88f54636ff366076edfc5c239f97b3c8e66"},"score":7.1,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#license"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#security-policy"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/build-cross-compilers.yml:26"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: jobLevel 'contents' permission set to 'write': .github/workflows/assets.yml:23","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/assets.yml:55","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:71","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build-alpine-base.yml:97","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:125","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-alpine-base.yml:169","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-cross-compilers.yml:30","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-cross-compilers.yml:78","Info: jobLevel 'contents' permission set to 'read': .github/workflows/buildyetusondemand.yml:29","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:38","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:39","Info: jobLevel 'contents' permission set to 'read': .github/workflows/cve-scan.yml:20","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/eden-trusted.yml:136","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/eden-trusted.yml:250","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/eden-trusted.yml:303","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/osv-scanner.yml:39","Info: jobLevel 'contents' permission set to 'read': .github/workflows/osv-scanner.yml:35","Info: jobLevel 'actions' permission set to 'read': .github/workflows/osv-scanner.yml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/osv-scanner.yml:50","Info: jobLevel 'actions' permission set to 'read': .github/workflows/osv-scanner.yml:51","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/osv-scanner.yml:52","Info: jobLevel 'actions' permission set to 'read': .github/workflows/pr-gate.yml:30","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/pr-gate.yml:31","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/publish.yml:312","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/rerun-ci.yml:17","Info: jobLevel 'issues' permission set to 'read': .github/workflows/rerun-ci.yml:18","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/rerun-ci.yml:19","Info: jobLevel 'contents' permission set to 'read': .github/workflows/rerun-ci.yml:20","Info: topLevel 'contents' permission set to 'read': .github/workflows/actionlint.yml:16","Warn: topLevel 'checks' permission set to 'write': .github/workflows/actionlint.yml:17","Info: topLevel 'contents' permission set to 'read': .github/workflows/ascii-check.yml:15","Info: found token with 'none' permissions: .github/workflows/assets.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/bpftrace-tests.yml:30","Info: found token with 'none' permissions: .github/workflows/build-alpine-base.yml:1","Info: found token with 'none' permissions: .github/workflows/build-cross-compilers.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/build.yml:17","Info: topLevel 'contents' permission set to 'read': .github/workflows/buildondemand.yml:19","Info: found token with 'none' permissions: .github/workflows/buildyetusondemand.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/check-docker-hashes-consistency.yml:26","Warn: no topLevel permission defined: .github/workflows/check-pubsub-persistence.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/claude-review.yml:14","Info: found token with 'none' permissions: .github/workflows/close-master-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/commit-messages.yml:15","Info: found token with 'none' permissions: .github/workflows/cve-scan.yml:1","Info: topLevel 'actions' permission set to 'read': .github/workflows/eden-trusted.yml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/eden-trusted.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/fuzz-tests.yml:26","Info: topLevel 'contents' permission set to 'read': .github/workflows/go-tests.yml:26","Info: found token with 'none' permissions: .github/workflows/osv-scanner.yml:1","Info: found token with 'none' permissions: .github/workflows/pr-gate.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish-evetest.yml:19","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish.yml:20","Warn: no topLevel permission defined: .github/workflows/request_codeowners_review.yml:1","Warn: no topLevel permission defined: .github/workflows/rerun-ci.yml:1","Warn: no topLevel permission defined: .github/workflows/rust-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/sbom-coverage-check.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/semgrep.yml:15","Info: topLevel 'contents' permission set to 'read': .github/workflows/spdx.yml:17","Info: topLevel 'contents' permission set to 'read': .github/workflows/yetus.yml:15","Info: found token with 'none' permissions: .github/workflows/zizmor.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#token-permissions"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Warn: codeowners review is not required on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 17.3.0 not signed: https://api.github.com/repos/lf-edge/eve/releases/371177296","Warn: release artifact 17.0.0-lts not signed: https://api.github.com/repos/lf-edge/eve/releases/360608642","Warn: release artifact 17.2.1 not signed: https://api.github.com/repos/lf-edge/eve/releases/359686660","Warn: release artifact 17.0.0-rc5 not signed: https://api.github.com/repos/lf-edge/eve/releases/356017408","Warn: release artifact 17.0.0-rc4 not signed: https://api.github.com/repos/lf-edge/eve/releases/354067836","Warn: release artifact 17.3.0 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/371177296","Warn: release artifact 17.0.0-lts does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/360608642","Warn: release artifact 17.2.1 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/359686660","Warn: release artifact 17.0.0-rc5 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/356017408","Warn: release artifact 17.0.0-rc4 does not have provenance: https://api.github.com/repos/lf-edge/eve/releases/354067836"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/ioBundleTree_test.go:298","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/ioBundleTree_test.go:402","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/ruleengine_test.go:303","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/usbmanager/usbcontroller_test.go:571","Info: GoBuiltInFuzzer integration found: pkg/pillar/cmd/zedagent/parseconfig_test.go:2622","Info: GoBuiltInFuzzer integration found: pkg/pillar/types/assignableadapters_test.go:802"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#fuzzing"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#sast"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: pkg/uefi/rpi/start4.elf:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/claude-review.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/claude-review.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cve-scan.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/cve-scan.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:196: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:222: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/eden-trusted.yml:235: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/eden-trusted.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:313: update your workflow using https://app.stepsecurity.io/secureworkflow/lf-edge/eve/publish.yml/master?enable=pin","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:27: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:14358309a308569c32bdc37e2e0e9694be33a9d99e68afb0f5ff33cc1f695dce","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:57","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:77","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:97: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:14358309a308569c32bdc37e2e0e9694be33a9d99e68afb0f5ff33cc1f695dce","Warn: containerImage not pinned by hash: build-tools/cross-compilers/Dockerfile:103","Warn: containerImage not pinned by hash: build-tools/src/scripts/Dockerfile:5","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/Dockerfile:4: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:14358309a308569c32bdc37e2e0e9694be33a9d99e68afb0f5ff33cc1f695dce","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/root/Dockerfile:6","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/root/Dockerfile:8: pin your Docker image by updating lfedge/eve-bpftrace:d411336b71859e7f6a21eb2c84c32c5d921e1394 to lfedge/eve-bpftrace:d411336b71859e7f6a21eb2c84c32c5d921e1394@sha256:ce627f21aa8c8afe90de60059604769cea27be07283dd5e56b910863148425ce","Warn: containerImage not pinned by hash: eve-tools/bpftrace-compiler/root/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: evetest/Dockerfile.broker:25: pin your Docker image by updating golang:1.25-alpine3.21 to golang:1.25-alpine3.21@sha256:b4dbd292a0852331c89dfd64e84d16811f3e3aae4c73c13d026c4d200715aff6","Warn: containerImage not pinned by hash: evetest/Dockerfile.broker:73: pin your Docker image by updating alpine:3.21 to alpine:3.21@sha256:48b0309ca019d89d40f670aa1bc06e426dc0931948452e8491e3d65087abc07d","Warn: containerImage not pinned by hash: evetest/Dockerfile.evetest:13: pin your Docker image by updating lfedge/adam:0.0.81 to lfedge/adam:0.0.81@sha256:b27092560d72659842711edd05ea48b53293e23289485bbb6b13aebc3c4a71d1","Warn: containerImage not pinned by hash: evetest/Dockerfile.evetest:23: pin your Docker image by updating golang:1.25-alpine3.21 to golang:1.25-alpine3.21@sha256:b4dbd292a0852331c89dfd64e84d16811f3e3aae4c73c13d026c4d200715aff6","Warn: containerImage not pinned by hash: evetest/Dockerfile.evetest:57: pin your Docker image by updating golang:1.25-alpine3.21 to golang:1.25-alpine3.21@sha256:b4dbd292a0852331c89dfd64e84d16811f3e3aae4c73c13d026c4d200715aff6","Warn: containerImage not pinned by hash: evetest/protobuilder/Dockerfile:5: pin your Docker image by updating golang:1.24-alpine to golang:1.24-alpine@sha256:8bee1901f1e530bfb4a7850aa7a479d17ae3a18beb6e09064ed54cfd245b7191","Warn: containerImage not pinned by hash: evetest/sdn/vm/Dockerfile:15: pin your Docker image by updating golang:1.25-alpine3.21 to golang:1.25-alpine3.21@sha256:b4dbd292a0852331c89dfd64e84d16811f3e3aae4c73c13d026c4d200715aff6","Warn: containerImage not pinned by hash: evetest/sdn/vm/Dockerfile:61: pin your Docker image by updating alpine:3.21 to alpine:3.21@sha256:48b0309ca019d89d40f670aa1bc06e426dc0931948452e8491e3d65087abc07d","Warn: containerImage not pinned by hash: evetest/sdn/vm/Dockerfile.vm:1: pin your Docker image by updating lfedge/eve-alpine:12.1.0 to lfedge/eve-alpine:12.1.0@sha256:4256090fe27ea1c10cbf0850a1cfa7c84e365b676fc40b187a98a27a28b6f103","Warn: containerImage not pinned by hash: evetest/sdn/vm/Dockerfile.vm:6: pin your Docker image by updating lfedge/eve-alpine:12.1.0 to lfedge/eve-alpine:12.1.0@sha256:4256090fe27ea1c10cbf0850a1cfa7c84e365b676fc40b187a98a27a28b6f103","Warn: containerImage not pinned by hash: evetest/testapps/logger-ctr/Dockerfile:4: pin your Docker image by updating alpine:3.21 to alpine:3.21@sha256:48b0309ca019d89d40f670aa1bc06e426dc0931948452e8491e3d65087abc07d","Warn: containerImage not pinned by hash: evetest/testapps/lps/Dockerfile:7: pin your Docker image by updating golang:1.25 to golang:1.25@sha256:699337d620559a59b4a2bb298ad59611e535d2ee755a34cf2d2a98f37578dc80","Warn: containerImage not pinned by hash: evetest/testapps/lps/Dockerfile:20: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517","Warn: containerImage not pinned by hash: evetest/testapps/ubuntu-ctr/Dockerfile:4: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517","Warn: containerImage not pinned by hash: pkg/alpine-base/Dockerfile:4: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:14358309a308569c32bdc37e2e0e9694be33a9d99e68afb0f5ff33cc1f695dce","Warn: containerImage not pinned by hash: pkg/alpine/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:1f744180283ffb4eabcc3862531aeacf1de886b3 to lfedge/eve-alpine:1f744180283ffb4eabcc3862531aeacf1de886b3@sha256:b43826c5e706594322f145700cf728e5af2400271cc09235afd9300781220f6d","Warn: containerImage not pinned by hash: pkg/alpine/Dockerfile:46: pin your Docker image by updating lfedge/eve-alpine-base:77cc1495c875b7468dbf4123210abf86a1ffb852-07a6e7df6 to lfedge/eve-alpine-base:77cc1495c875b7468dbf4123210abf86a1ffb852-07a6e7df6@sha256:46e5bc76898b43a1ca964d9809a3ed0eee3a23b576a82f7f2f6dcaa3672b470d","Warn: containerImage not pinned by hash: pkg/alpine/Dockerfile:76","Warn: containerImage not pinned by hash: pkg/alpine/dnstest/Dockerfile:4","Warn: containerImage not pinned by hash: pkg/apparmor/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/bpftrace/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/bpftrace/Dockerfile:78","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:10: pin your Docker image by updating lfedge/eve-optee-os:70a19334969c2d1eb8748a31203e63d54b2d3530 to lfedge/eve-optee-os:70a19334969c2d1eb8748a31203e63d54b2d3530@sha256:1a85edaacd8043135973f20fb3f99544022bfb47673c59d981441acedd25fb4c","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:18: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:23: pin your Docker image by updating lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e to lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e@sha256:ac276a7f2dc0343bd00ef31ea9ad6bf69474ba4465a4c3b6aef44f2988cd1803","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:27: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:32","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:36","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:40","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:49","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:50","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:51","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:53","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:54","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:55","Warn: containerImage not pinned by hash: pkg/bsp-imx/Dockerfile:58","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:108","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:109","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:110","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:114: pin your Docker image by updating lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab to lfedge/eve-alpine:7b892c4653d567eb3b6a306064c3bc7fc14f6bab@sha256:2527449d8c5db7d3b3e070400cc907924bcc454e02c71ae45cd578eb9b6c1cc8","Warn: containerImage not pinned by hash: pkg/cross-compilers/Dockerfile:117","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:11: pin your Docker image by updating lfedge/eve-recovertpm:10c3bc5d35f8557dc9fd12ae4cd78485cd34c215 to lfedge/eve-recovertpm:10c3bc5d35f8557dc9fd12ae4cd78485cd34c215@sha256:393d90dc947174b5c5c2f445a6adba328a569d1b91d3425bd94b1fe6eb2aa127","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:12: pin your Docker image by updating lfedge/eve-bpftrace:d411336b71859e7f6a21eb2c84c32c5d921e1394 to lfedge/eve-bpftrace:d411336b71859e7f6a21eb2c84c32c5d921e1394@sha256:ce627f21aa8c8afe90de60059604769cea27be07283dd5e56b910863148425ce","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile:100","Warn: containerImage not pinned by hash: pkg/debug/Dockerfile.spec:1: pin your Docker image by updating lfedge/eve-alpine:47d267f35e4832f639bf65bbe8a2e7b2f31e3e36 to lfedge/eve-alpine:47d267f35e4832f639bf65bbe8a2e7b2f31e3e36@sha256:17e751f8b367df8d60b86112bdf89eb2005b02fd24573934c314a7a633a11643","Warn: containerImage not pinned by hash: pkg/dom0-ztools/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/edgeview/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/edgeview/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:1: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:6","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:8","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:10","Warn: containerImage not pinned by hash: pkg/eve/Dockerfile.in:12","Warn: containerImage not pinned by hash: pkg/external-boot-image/Dockerfile.in:4","Warn: containerImage not pinned by hash: pkg/external-boot-image/Dockerfile.in:6","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:7","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:8","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:9","Warn: containerImage not pinned by hash: pkg/fscrypt/Dockerfile:12","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:26","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:30","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:38","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:42","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:125: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:131","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:169","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:170","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:171","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:173: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:257: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:266","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:267","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:268","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:269","Warn: containerImage not pinned by hash: pkg/fw/Dockerfile:271","Warn: containerImage not pinned by hash: pkg/gpt-tools/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:40","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:46","Warn: containerImage not pinned by hash: pkg/grub/Dockerfile:53","Warn: containerImage not pinned by hash: pkg/guacd/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:6: pin your Docker image by updating lfedge/eve-rust:1.93.1-1 to lfedge/eve-rust:1.93.1-1@sha256:80324fd863a13478754ceb3d6290c348d064ca0381c763d5d5336b8b4e5e4ffb","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:10","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:13","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:16","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:20","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:31: pin your Docker image by updating lfedge/eve-debug:d1461b73753e42bf288cc3e35514fa0a9d1061a2 to lfedge/eve-debug:d1461b73753e42bf288cc3e35514fa0a9d1061a2@sha256:49bb098dabc60f96096384263326c9de57181f296688283eb03b7e0049947e0e","Warn: containerImage not pinned by hash: pkg/installer/Dockerfile:34: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/ipxe/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/kdump/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/kexec/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/kube/Dockerfile:22: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/measure-config/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/memory-monitor/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/mkconf/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/mkimage-iso-efi/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/mkimage-raw-efi/Dockerfile:8: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/mkrootfs-ext4/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/mkrootfs-squash/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:7: pin your Docker image by updating lfedge/eve-rust:1.93.1-1 to lfedge/eve-rust:1.93.1-1@sha256:80324fd863a13478754ceb3d6290c348d064ca0381c763d5d5336b8b4e5e4ffb","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:10","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:13","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:16","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:21","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:24","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:39","Warn: containerImage not pinned by hash: pkg/monitor/Dockerfile:56: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/newlog/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/newlog/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/node-exporter/Dockerfile:4: pin your Docker image by updating prom/node-exporter:v1.9.1 to prom/node-exporter:v1.9.1@sha256:d00a542e409ee618a4edc67da14dd48c5da66726bbd5537ab2af9c1dfc442c8a","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:8: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:32","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:33","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:35","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:36","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:37","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:38","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:40","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:44","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/nvidia/Dockerfile:52","Warn: containerImage not pinned by hash: pkg/optee-client/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/optee-client/Dockerfile:49","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:10: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:15: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:20: pin your Docker image by updating lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e to lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e@sha256:ac276a7f2dc0343bd00ef31ea9ad6bf69474ba4465a4c3b6aef44f2988cd1803","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:24: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:29","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:33","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:37","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:46","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:47","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:49","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:51","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:52","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:53","Warn: containerImage not pinned by hash: pkg/optee-os/Dockerfile:56","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:13: pin your Docker image by updating lfedge/eve-uefi:64153003641b262bf3021da93a7954a7a34f9414 to lfedge/eve-uefi:64153003641b262bf3021da93a7954a7a34f9414@sha256:e6cbc1336a34534c70e1ae3f0ad82d9b01bdc374de3f37b6a60d68695c80412d","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:14: pin your Docker image by updating lfedge/eve-dom0-ztools:ce1fdf85a2596f0b3c8df9d82564939f31fa7067 to lfedge/eve-dom0-ztools:ce1fdf85a2596f0b3c8df9d82564939f31fa7067@sha256:44f60e7186365285059d3838328a545634df83f0a92421483a3e6311dc3516ff","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:26: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:32: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:37: pin your Docker image by updating lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e to lfedge/eve-cross-compilers:d794c049baf50389be1dd48da056fb2472574c3e@sha256:ac276a7f2dc0343bd00ef31ea9ad6bf69474ba4465a4c3b6aef44f2988cd1803","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:41: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:48","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:50","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:54","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:67","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:68","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:70","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:71","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:74","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:153: pin your Docker image by updating lfedge/eve-fscrypt:002b585701715d13daf11da0ef86b25c8eaef68e to lfedge/eve-fscrypt:002b585701715d13daf11da0ef86b25c8eaef68e@sha256:43b36f44e2ebe9a0cdd949e9e45f60b3f54aa3e20e657ab18ec3f3e70f1ffeb0","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:154: pin your Docker image by updating lfedge/eve-gpt-tools:8d3ae5c8f34f575bfb70c5e8088188ff97bb21f1 to lfedge/eve-gpt-tools:8d3ae5c8f34f575bfb70c5e8088188ff97bb21f1@sha256:f175aff026842fb5f357661a56139b5c12c9e16f4efe4bca683cde5a8016e4a2","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:159: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/pillar/Dockerfile:166: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/pillar/vcom/api/builder/Dockerfile:5: pin your Docker image by updating alpine:3.22 to alpine:3.22@sha256:14358309a308569c32bdc37e2e0e9694be33a9d99e68afb0f5ff33cc1f695dce","Warn: containerImage not pinned by hash: pkg/recovertpm/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/rngd/Dockerfile:3: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/sources/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/storage-init/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:5: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:25","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:27","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:85","Warn: containerImage not pinned by hash: pkg/u-boot/Dockerfile:89","Warn: containerImage not pinned by hash: pkg/udev/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:23","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:36","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:47","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:72","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:74","Warn: containerImage not pinned by hash: pkg/uefi/Dockerfile:83","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:25: pin your Docker image by updating lfedge/eve-rust:1.93.1-1 to lfedge/eve-rust:1.93.1-1@sha256:80324fd863a13478754ceb3d6290c348d064ca0381c763d5d5336b8b4e5e4ffb","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:28","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:31","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:34","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:38","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:42","Warn: containerImage not pinned by hash: pkg/vector/Dockerfile:65: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:6: pin your Docker image by updating lfedge/eve-dom0-ztools:ce1fdf85a2596f0b3c8df9d82564939f31fa7067 to lfedge/eve-dom0-ztools:ce1fdf85a2596f0b3c8df9d82564939f31fa7067@sha256:44f60e7186365285059d3838328a545634df83f0a92421483a3e6311dc3516ff","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:13: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:102: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/vtpm/Dockerfile:118","Warn: containerImage not pinned by hash: pkg/watchdog/Dockerfile:4: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/wwan/Dockerfile:6: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/xen-tools/Dockerfile:6: pin your Docker image by updating lfedge/eve-uefi:64153003641b262bf3021da93a7954a7a34f9414 to lfedge/eve-uefi:64153003641b262bf3021da93a7954a7a34f9414@sha256:e6cbc1336a34534c70e1ae3f0ad82d9b01bdc374de3f37b6a60d68695c80412d","Warn: containerImage not pinned by hash: pkg/xen-tools/Dockerfile:7: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/xen-tools/Dockerfile:23: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: pkg/xen/Dockerfile:1: pin your Docker image by updating lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c to lfedge/eve-alpine:d075dd224fa7a7540817d224cc28d3cd998ad04c@sha256:5aa45f2425d3845ab253aa37833bcc389ee92b0f1d4730a6a19f5043e165a37b","Warn: containerImage not pinned by hash: tools/yetus/Dockerfile:8: pin your Docker image by updating ghcr.io/apache/yetus:0.15.1 to ghcr.io/apache/yetus:0.15.1@sha256:13076949f2f1807a8d6d83f4a29e8dbe43b1fccd96c3c213b0f2b28c2e09ec84","Warn: goCommand not pinned by hash: eve-tools/bpftrace-compiler/vendor/github.com/agext/levenshtein/test.sh:5","Warn: goCommand not pinned by hash: eve-tools/bpftrace-compiler/vendor/github.com/pelletier/go-toml/benchmark.sh:10","Warn: goCommand not pinned by hash: pkg/edgeview/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/installer/src/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/kube/kube-init/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/kube/update-component/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/newlog/vendor/github.com/json-iterator/go/build.sh:10","Warn: pipCommand not pinned by hash: pkg/pillar/debian/postinst:15","Warn: pipCommand not pinned by hash: pkg/pillar/debian/postinst:18","Warn: pipCommand not pinned by hash: pkg/pillar/debian/postinst:26","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.golint.sh:5","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:5","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:6","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:7","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:8","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/google/gopacket/.travis.install.sh:9","Warn: goCommand not pinned by hash: pkg/pillar/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/recovertpm/src/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/vtpm/swtpm-vtpm/vendor/github.com/json-iterator/go/build.sh:10","Warn: goCommand not pinned by hash: pkg/wwan/mmagent/vendor/github.com/json-iterator/go/build.sh:10","Warn: pipCommand not pinned by hash: .github/workflows/commit-messages.yml:41","Info:  73 out of  73 GitHub-owned GitHubAction dependencies pinned","Info:  22 out of  30 third-party GitHubAction dependencies pinned","Info:   3 out of 219 containerImage dependencies pinned","Info:   6 out of  23 goCommand dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#pinned-dependencies"}}]}