{"date":"2026-10-12","repo":{"name":"github.com/manticoresoftware/manticoresearch","commit":"c118ef4232e8b385b0fd931688fb9a29ea44f84a"},"scorecard":{"version":"v5.6.0","commit":"61e84743356275f6ffca23b1b2f2cb945e19eb96"},"score":3.8,"checks":[{"name":"Code-Review","score":3,"reason":"Found 11/30 approved changesets -- score normalized to 3","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#code-review","short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged."}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#maintained","short":"Determines if the project is \"actively maintained\"."}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: untrusted code checkout '${{ github.event_name == 'workflow_run' && github.event.workflow_run.head_sha || github.sha }}': .github/workflows/pack_publish.yml:191","Warn: untrusted code checkout '${{ github.event_name == 'workflow_run' && github.event.workflow_run.head_sha || github.sha }}': .github/workflows/pack_publish.yml:84","Warn: untrusted code checkout '${{ github.event_name == 'workflow_run' && github.event.workflow_run.head_sha || github.sha }}': .github/workflows/pack_publish.yml:865","Warn: untrusted code checkout '${{ github.event_name == 'workflow_run' && github.event.workflow_run.head_sha || github.sha }}': .github/workflows/pack_publish.yml:433","Warn: untrusted code checkout '${{ github.event_name == 'workflow_run' && github.event.workflow_run.head_sha || github.sha }}': .github/workflows/pack_publish.yml:295"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#dangerous-workflow","short":"Determines if the project's GitHub Action workflows avoid dangerous patterns."}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/check_docs.yml:17","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/nightly_fuzzer.yml:194","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test.yml:423","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test.yml:422","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test.yml:846","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test.yml:847","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test.yml:440","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test.yml:441","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test.yml:1171","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test.yml:1172","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test.yml:810","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test.yml:811","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test.yml:828","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test.yml:829","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test.yml:1154","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test.yml:1153","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test.yml:404","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test.yml:405","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test.yml:1135","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test.yml:1136","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/win_test_template.yml:194","Info: jobLevel 'contents' permission set to 'read': .github/workflows/win_test_template.yml:195","Warn: no topLevel permission defined: .github/workflows/build_template.yml:1","Warn: no topLevel permission defined: .github/workflows/check_docs.yml:1","Warn: no topLevel permission defined: .github/workflows/checklist_validator.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/cleanup_clt_candidate_images.yml:19","Warn: topLevel 'packages' permission set to 'write': .github/workflows/cleanup_clt_candidate_images.yml:20","Warn: no topLevel permission defined: .github/workflows/clt_nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/clt_tests.yml:1","Warn: no topLevel permission defined: .github/workflows/coverage.yml:1","Warn: no topLevel permission defined: .github/workflows/deploy_docs.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/installer.yml:19","Warn: no topLevel permission defined: .github/workflows/mcl_embeddings_build.yml:1","Warn: no topLevel permission defined: .github/workflows/mcl_embeddings_core.yml:1","Warn: no topLevel permission defined: .github/workflows/mcl_pack_publish.yml:1","Warn: no topLevel permission defined: .github/workflows/mcl_package_build.yml:1","Warn: no topLevel permission defined: .github/workflows/mcl_runtime_build.yml:1","Warn: no topLevel permission defined: .github/workflows/nightly_dumps.yml:1","Warn: no topLevel permission defined: .github/workflows/nightly_fuzzer.yml:1","Warn: no topLevel permission defined: .github/workflows/nightly_integration.yml:1","Warn: no topLevel permission defined: .github/workflows/nightly_memleaks.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/pack_publish.yml:35","Warn: no topLevel permission defined: .github/workflows/pack_publish_galera.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test.yml:7","Warn: topLevel 'packages' permission set to 'write': .github/workflows/test.yml:8","Warn: no topLevel permission defined: .github/workflows/test_template.yml:1","Warn: no topLevel permission defined: .github/workflows/win_test_template.yml:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#token-permissions","short":"Determines if the project's workflows follow the principle of least privilege."}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: dist/build_dockers/nsis/nsisunz.dll:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#binary-artifacts","short":"Determines if the project has generated executable (binary) artifacts in the source repository."}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#security-policy","short":"Determines if the project has published a security policy."}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#cii-best-practices","short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge."}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: CppLibFuzzer integration found: src/fuzzer/fuzzer.cpp:123"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#fuzzing","short":"Determines if the project uses fuzzing."}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: GNU General Public License v3.0: LICENSE:0"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#license","short":"Determines if the project has defined a license."}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#signed-releases","short":"Determines if the project cryptographically signs release artifacts."}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 24 are checked with a SAST tool"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#sast","short":"Determines if the project uses static code analysis."}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'","Warn: branch protection not enabled for branch 'manticore-29.0.2'","Warn: branch protection not enabled for branch 'manticore-28.4.4'","Warn: branch protection not enabled for branch 'manticore-9.2.14'","Warn: branch protection not enabled for branch 'manticore-6.3.8'","Warn: branch protection not enabled for branch 'manticore-6.2.0'"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#branch-protection","short":"Determines if the default and release branches are protected with GitHub's branch protection settings."}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/test.yml:994"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#packaging","short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall."}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: `select foo` must be followed by `in`, `do`, `;`, or a newline: test/clt-tests/mysqldump/versions/mariadb/script_versions_mariadb.sh:99","Info: Possibly incomplete results: error parsing shell code: `select foo` must be followed by `in`, `do`, `;`, or a newline: test/clt-tests/mysqldump/versions/mysql/script_versions_mysql.sh:99","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_template.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/build_template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_template.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/build_template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_template.yml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/build_template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_template.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/build_template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_template.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/build_template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_docs.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/check_docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/check_docs.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/check_docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/checklist_validator.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/checklist_validator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cleanup_clt_candidate_images.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/cleanup_clt_candidate_images.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clt_nightly.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/clt_nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clt_nightly.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/clt_nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/clt_nightly.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/clt_nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clt_nightly.yml:231: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/clt_nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/clt_nightly.yml:232: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/clt_nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clt_tests.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/clt_tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/clt_tests.yml:163: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/clt_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clt_tests.yml:219: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/clt_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clt_tests.yml:239: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/clt_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clt_tests.yml:254: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/clt_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clt_tests.yml:272: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/clt_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clt_tests.yml:341: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/clt_tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/clt_tests.yml:347: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/clt_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/clt_tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/clt_tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/clt_tests.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/clt_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy_docs.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/deploy_docs.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy_docs.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/deploy_docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/installer.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/installer.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/installer.yml:222: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/installer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_embeddings_core.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_embeddings_core.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/mcl_embeddings_core.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_embeddings_core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_embeddings_core.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_embeddings_core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_embeddings_core.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_embeddings_core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_embeddings_core.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_embeddings_core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_embeddings_core.yml:251: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_embeddings_core.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/mcl_embeddings_core.yml:288: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_embeddings_core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_embeddings_core.yml:359: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_embeddings_core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_embeddings_core.yml:368: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_embeddings_core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_embeddings_core.yml:378: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_embeddings_core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_embeddings_core.yml:591: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_embeddings_core.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_pack_publish.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_pack_publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_package_build.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_package_build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_package_build.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_package_build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_package_build.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_package_build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_package_build.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_package_build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_package_build.yml:301: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_package_build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/mcl_package_build.yml:308: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_package_build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_runtime_build.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_runtime_build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_runtime_build.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_runtime_build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_runtime_build.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_runtime_build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_runtime_build.yml:268: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_runtime_build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mcl_runtime_build.yml:274: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/mcl_runtime_build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_dumps.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_dumps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_dumps.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_dumps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_dumps.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_dumps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_dumps.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_dumps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_dumps.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_dumps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_dumps.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_dumps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_dumps.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_dumps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_fuzzer.yml:172: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_fuzzer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_fuzzer.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_fuzzer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_fuzzer.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_fuzzer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_fuzzer.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_fuzzer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_fuzzer.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_fuzzer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_fuzzer.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_fuzzer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_fuzzer.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_fuzzer.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_fuzzer.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_fuzzer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_fuzzer.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_fuzzer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_fuzzer.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_fuzzer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_fuzzer.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_fuzzer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_fuzzer.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_fuzzer.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:221: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:222: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:206: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:207: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:173: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:192: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_integration.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_memleaks.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_memleaks.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly_memleaks.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_memleaks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly_memleaks.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/nightly_memleaks.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:894: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:565: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:576: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:866: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:878: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:296: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:910: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:434: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:441: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:476: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:598: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:609: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:627: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:638: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:656: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:531: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:542: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:192: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish.yml:844: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish_galera.yml:223: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish_galera.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish_galera.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish_galera.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish_galera.yml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish_galera.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish_galera.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish_galera.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pack_publish_galera.yml:208: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/pack_publish_galera.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:1022: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:1024: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:533: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:551: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:358: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:377: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:923: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:928: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:934: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:942: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:964: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:671: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:701: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:1047: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:1062: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:1064: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:1071: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:571: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:601: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:502: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:873: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:894: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:621: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:651: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_template.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test_template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_template.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test_template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test_template.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test_template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_template.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test_template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_template.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test_template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_template.yml:267: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test_template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test_template.yml:285: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/test_template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_test_template.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/win_test_template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/win_test_template.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/win_test_template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_test_template.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/win_test_template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_test_template.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/win_test_template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_test_template.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/win_test_template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_test_template.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/win_test_template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_test_template.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/win_test_template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/win_test_template.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/win_test_template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/win_test_template.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/win_test_template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/win_test_template.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/win_test_template.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/win_test_template.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/win_test_template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/win_test_template.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/win_test_template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/win_test_template.yml:211: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/win_test_template.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/win_test_template.yml:231: update your workflow using https://app.stepsecurity.io/secureworkflow/manticoresoftware/manticoresearch/win_test_template.yml/main?enable=pin","Warn: containerImage not pinned by hash: dist/build_dockers/cross/external_toolchain/Dockerfile:1: pin your Docker image by updating ubuntu:focal to ubuntu:focal@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: dist/build_dockers/cross/external_toolchain/Dockerfile_cmake3243:1: pin your Docker image by updating ubuntu:focal to ubuntu:focal@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: dist/build_dockers/nsis/Dockerfile:1: pin your Docker image by updating ubuntu:jammy to ubuntu:jammy@sha256:5ec03bb3441e8b0bf3b4f9cd4629a1ae763010dc3035bb8da3ae6cf026486401","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/bionic/base_build/Dockerfile:1: pin your Docker image by updating ubuntu:bionic to ubuntu:bionic@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/bionic/boost_175/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/bionic/cmake_320/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/bullseye/base_build/Dockerfile:1: pin your Docker image by updating debian:bullseye to debian:bullseye@sha256:6f519a81440354a85eb592c5f32109ab80605f6b892455983a6f618bf87fabe9","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/bullseye/boost_175/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/bullseye/cmake_320/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/buster/base_build/Dockerfile:1: pin your Docker image by updating debian:buster to debian:buster@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/buster/boost_175/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/buster/cmake_320/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/centos7/base_build/Dockerfile:1: pin your Docker image by updating centos:7 to centos:7@sha256:be65f488b7764ad3638f236b7b515b3678369a5124c47b8d32916d6487418ea4","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/centos7/boost_175/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/centos7/cmake_320/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/centos8/base_build/Dockerfile:1: pin your Docker image by updating centos:8 to centos:8@sha256:a27fd8080b517143cbbbab9dfb7c8571c40d67d534bbdee55bd6c473f432b177","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/centos8/boost_175/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/centos8/cmake_320/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/focal/base_build/Dockerfile:1: pin your Docker image by updating ubuntu:focal to ubuntu:focal@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/focal/boost_175/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/focal/cmake_320/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/stretch/base_build/Dockerfile:1: pin your Docker image by updating debian:stretch to debian:stretch@sha256:c5c5200ff1e9c73ffbf188b4a67eb1c91531b644856b4aefe86a58d2f0cb05be","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/stretch/boost_175/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/stretch/cmake_320/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/xenial/base_build/Dockerfile:1: pin your Docker image by updating ubuntu:xenial to ubuntu:xenial@sha256:1f1a2d56de1d604801a9671f301190704c25d604a416f59e03c04f5c6ffee0d6","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/xenial/boost_175/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/aarch64/xenial/cmake_320/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/bionic/base_build/Dockerfile:1: pin your Docker image by updating ubuntu:bionic to ubuntu:bionic@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98","Warn: containerImage not pinned by hash: dist/build_dockers/retired/bionic/base_build_arm/Dockerfile:1: pin your Docker image by updating ubuntu:bionic to ubuntu:bionic@sha256:152dc042452c496007f07ca9127571cb9c29697f42acbfad72324b2bb2e43c98","Warn: containerImage not pinned by hash: dist/build_dockers/retired/bionic/boost_175/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/bionic/boost_175_arm/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/bionic/clang_13/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/bionic/cmake_320/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/bionic/cmake_320_arm/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/bullseye/base_build/Dockerfile:1: pin your Docker image by updating debian:bullseye to debian:bullseye@sha256:6f519a81440354a85eb592c5f32109ab80605f6b892455983a6f618bf87fabe9","Warn: containerImage not pinned by hash: dist/build_dockers/retired/bullseye/boost_175/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/bullseye/clang_13/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/bullseye/cmake_320/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/buster/base_build/Dockerfile:1: pin your Docker image by updating debian:buster to debian:buster@sha256:58ce6f1271ae1c8a2006ff7d3e54e9874d839f573d8009c20154ad0f2fb0a225","Warn: containerImage not pinned by hash: dist/build_dockers/retired/buster/boost_175/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/buster/clang_13/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/buster/cmake_320/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/centos7/base_build/Dockerfile:1: pin your Docker image by updating centos:7 to centos:7@sha256:be65f488b7764ad3638f236b7b515b3678369a5124c47b8d32916d6487418ea4","Warn: containerImage not pinned by hash: dist/build_dockers/retired/centos7/boost_175/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/centos7/clang_7/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/centos7/cmake_320/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/centos8/base_build/Dockerfile:1: pin your Docker image by updating centos:8 to centos:8@sha256:a27fd8080b517143cbbbab9dfb7c8571c40d67d534bbdee55bd6c473f432b177","Warn: containerImage not pinned by hash: dist/build_dockers/retired/centos8/boost_175/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/centos8/clang_11/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/centos8/cmake_320/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/cross/base_clang12/Dockerfile:1: pin your Docker image by updating ubuntu:focal to ubuntu:focal@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: dist/build_dockers/retired/cross/base_clang13/Dockerfile:1: pin your Docker image by updating ubuntu:focal to ubuntu:focal@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: dist/build_dockers/retired/cross/bigsur_arm64/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/cross/bigsur_sdk/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/cross/bigsur_x64/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/cross/build_cross/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/cross/centos_rhel/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/cross/cmake232/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/cross/cmake323/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/cross/cmake_clang/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/cross/freebsd_13/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/cross/toolchain_clang/Dockerfile:1: pin your Docker image by updating ubuntu:focal to ubuntu:focal@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: dist/build_dockers/retired/cross/ubuntu_debian/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/cross/ubuntu_debian_amd64/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/cross/ubuntu_debian_arm64/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/focal/base_build/Dockerfile:1: pin your Docker image by updating ubuntu:focal to ubuntu:focal@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: dist/build_dockers/retired/focal/boost_175/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/focal/clang_13/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/focal/cmake_320/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/jammy/base_build/Dockerfile:1: pin your Docker image by updating ubuntu:jammy to ubuntu:jammy@sha256:5ec03bb3441e8b0bf3b4f9cd4629a1ae763010dc3035bb8da3ae6cf026486401","Warn: containerImage not pinned by hash: dist/build_dockers/retired/jammy/boost_178/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/jammy/clang_13/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/jammy/cmake_323/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/stretch/base_build/Dockerfile:1: pin your Docker image by updating debian:stretch to debian:stretch@sha256:c5c5200ff1e9c73ffbf188b4a67eb1c91531b644856b4aefe86a58d2f0cb05be","Warn: containerImage not pinned by hash: dist/build_dockers/retired/stretch/boost_175/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/stretch/clang_13/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/stretch/cmake_320/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/xenial/base_build/Dockerfile:1: pin your Docker image by updating ubuntu:xenial to ubuntu:xenial@sha256:1f1a2d56de1d604801a9671f301190704c25d604a416f59e03c04f5c6ffee0d6","Warn: containerImage not pinned by hash: dist/build_dockers/retired/xenial/boost_175/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/xenial/clang_12/Dockerfile:1","Warn: containerImage not pinned by hash: dist/build_dockers/retired/xenial/cmake_320/Dockerfile:1","Warn: containerImage not pinned by hash: misc/ctest/ubertests/Dockerfile:1: pin your Docker image by updating ubuntu:jammy to ubuntu:jammy@sha256:5ec03bb3441e8b0bf3b4f9cd4629a1ae763010dc3035bb8da3ae6cf026486401","Warn: containerImage not pinned by hash: misc/ctest/ubertests/ubertests_docker_image/Dockerfile:1: pin your Docker image by updating ubuntu:jammy to ubuntu:jammy@sha256:5ec03bb3441e8b0bf3b4f9cd4629a1ae763010dc3035bb8da3ae6cf026486401","Warn: containerImage not pinned by hash: misc/ctest/valgrind/Dockerfile:1: pin your Docker image by updating ubuntu:jammy to ubuntu:jammy@sha256:5ec03bb3441e8b0bf3b4f9cd4629a1ae763010dc3035bb8da3ae6cf026486401","Warn: containerImage not pinned by hash: misc/dockerfiles/mysql/Dockerfile:1: pin your Docker image by updating mysql:5.7 to mysql:5.7@sha256:4bc6bc963e6d8443453676cae56536f4b8156d78bae03c0145cbe47c2aad73bb","Warn: containerImage not pinned by hash: misc/dockerfiles/test/Dockerfile:1: pin your Docker image by updating ubuntu:16.04 to ubuntu:16.04@sha256:1f1a2d56de1d604801a9671f301190704c25d604a416f59e03c04f5c6ffee0d6","Warn: containerImage not pinned by hash: misc/morphology/Dockerfile:1: pin your Docker image by updating python:3.11-slim to python:3.11-slim@sha256:e88e9763f943ec1834f992a4b51e0f24500486803e8bc534e5767af9ea65f6ce","Warn: containerImage not pinned by hash: test/clt-tests/base/dind/Dockerfile:1: pin your Docker image by updating docker:dind to docker:dind@sha256:0b6d18a4a222e71c88be6034926b4f6cde2fc33c2218643d03ccfddc65995470","Warn: downloadThenRun not pinned by hash: dist/build_dockers/cross/external_toolchain/Dockerfile:54-57","Warn: downloadThenRun not pinned by hash: dist/build_dockers/retired/bionic/clang_13/Dockerfile:3-8","Warn: downloadThenRun not pinned by hash: dist/build_dockers/retired/bullseye/clang_13/Dockerfile:3-8","Warn: downloadThenRun not pinned by hash: dist/build_dockers/retired/buster/clang_13/Dockerfile:3-8","Warn: downloadThenRun not pinned by hash: dist/build_dockers/retired/focal/clang_13/Dockerfile:3-8","Warn: downloadThenRun not pinned by hash: dist/build_dockers/retired/stretch/clang_13/Dockerfile:3-9","Warn: downloadThenRun not pinned by hash: dist/build_dockers/retired/xenial/clang_12/Dockerfile:3-9","Warn: downloadThenRun not pinned by hash: misc/ctest/ubertests/Dockerfile:38-41","Warn: downloadThenRun not pinned by hash: misc/ctest/ubertests/Dockerfile:64-66","Info:   0 out of 111 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  60 third-party GitHubAction dependencies pinned","Info:   0 out of  88 containerImage dependencies pinned","Info:   0 out of   9 downloadThenRun dependencies pinned"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#pinned-dependencies","short":"Determines if the project has declared and pinned the dependencies of its build process."}}]}