{"date":"2022-08-15","repo":{"name":"github.com/microsoft/pai","commit":"e7452afc715841b1d768affe16a71e8975a6c6b6"},"scorecard":{"version":"v4.5.0-26-g10b6052","commit":"10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93"},"score":6.5,"checks":[{"name":"Maintained","score":0,"reason":"1 commit(s) out of 30 and 0 issue activity out of 30 found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all last 30 commits are reviewed through GitHub","details":null,"documentation":{"short":"Determines if the project requires code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no badge detected","details":null,"documentation":{"short":"Determines if the project has a CII Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"no vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":["Warn: no GitHub releases found"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy detected in current repo: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: : LICENSE:1"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#license"}},{"name":"Packaging","score":-1,"reason":"no published package detected","details":["Warn: no GitHub publishing workflow detected"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"non read-only tokens detected in GitHub workflows","details":["Warn: no topLevel permission defined: .github/workflows/continuous-integration.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/continuous-integration.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/lint.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/lint.yml/master?enable=permissions"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":null,"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#fuzzing"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: Dependabot detected"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#dependency-update-tool"}},{"name":"Branch-Protection","score":8,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'force pushes' disabled on branch 'master'","Info: 'allow deletion' disabled on branch 'master'","Info: status check found to merge onto on branch 'master'","Warn: number of required reviewers is only 1 on branch 'master'","Info: 'force pushes' disabled on branch 'pai-1.8.y'","Info: 'allow deletion' disabled on branch 'pai-1.8.y'","Info: status check found to merge onto on branch 'pai-1.8.y'","Warn: number of required reviewers is only 1 on branch 'pai-1.8.y'","Info: 'force pushes' disabled on branch 'pai-1.7.y'","Info: 'allow deletion' disabled on branch 'pai-1.7.y'","Info: status check found to merge onto on branch 'pai-1.7.y'","Warn: number of required reviewers is only 1 on branch 'pai-1.7.y'","Info: 'force pushes' disabled on branch 'pai-1.6.y'","Info: 'allow deletion' disabled on branch 'pai-1.6.y'","Info: status check found to merge onto on branch 'pai-1.6.y'","Warn: number of required reviewers is only 1 on branch 'pai-1.6.y'","Info: 'force pushes' disabled on branch 'pai-1.4.y'","Info: 'allow deletion' disabled on branch 'pai-1.4.y'","Info: status check found to merge onto on branch 'pai-1.4.y'","Warn: number of required reviewers is only 1 on branch 'pai-1.4.y'","Info: 'force pushes' disabled on branch 'pai-1.1.y'","Info: 'allow deletion' disabled on branch 'pai-1.1.y'","Info: status check found to merge onto on branch 'pai-1.1.y'","Warn: number of required reviewers is only 1 on branch 'pai-1.1.y'","Info: 'force pushes' disabled on branch 'pai-1.0.y'","Info: 'allow deletion' disabled on branch 'pai-1.0.y'","Info: status check found to merge onto on branch 'pai-1.0.y'","Warn: number of required reviewers is only 1 on branch 'pai-1.0.y'","Info: 'force pushes' disabled on branch 'pai-0.17.y'","Info: 'allow deletion' disabled on branch 'pai-0.17.y'","Info: status check found to merge onto on branch 'pai-0.17.y'","Warn: number of required reviewers is only 1 on branch 'pai-0.17.y'","Info: 'force pushes' disabled on branch 'pai-0.11.y'","Info: 'allow deletion' disabled on branch 'pai-0.11.y'","Info: status check found to merge onto on branch 'pai-0.11.y'","Warn: number of required reviewers is only 1 on branch 'pai-0.11.y'","Info: 'force pushes' disabled on branch 'pai-0.10.y'","Info: 'allow deletion' disabled on branch 'pai-0.10.y'","Info: status check found to merge onto on branch 'pai-0.10.y'","Warn: number of required reviewers is only 1 on branch 'pai-0.10.y'","Info: 'force pushes' disabled on branch 'pai-0.9.y'","Info: 'allow deletion' disabled on branch 'pai-0.9.y'","Info: status check found to merge onto on branch 'pai-0.9.y'","Warn: number of required reviewers is only 1 on branch 'pai-0.9.y'","Info: 'force pushes' disabled on branch 'pai-0.8.y'","Info: 'allow deletion' disabled on branch 'pai-0.8.y'","Info: status check found to merge onto on branch 'pai-0.8.y'","Warn: number of required reviewers is only 1 on branch 'pai-0.8.y'","Info: 'force pushes' disabled on branch 'pai-0.7.y'","Info: 'allow deletion' disabled on branch 'pai-0.7.y'","Info: status check found to merge onto on branch 'pai-0.7.y'","Warn: number of required reviewers is only 1 on branch 'pai-0.7.y'","Info: 'force pushes' disabled on branch 'pai-0.6.y'","Info: 'allow deletion' disabled on branch 'pai-0.6.y'","Info: status check found to merge onto on branch 'pai-0.6.y'","Warn: number of required reviewers is only 1 on branch 'pai-0.6.y'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/continuous-integration.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/continuous-integration.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/continuous-integration.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/continuous-integration.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/continuous-integration.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/continuous-integration.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/continuous-integration.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/continuous-integration.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/continuous-integration.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/continuous-integration.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/continuous-integration.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/continuous-integration.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/continuous-integration.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/continuous-integration.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yml:176: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/continuous-integration.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration.yml:178: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/continuous-integration.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/lint.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/lint.yml/master?enable=pin","Warn: containerImage not pinned by hash: contrib/api-stress-test/build/docker/dockerfile:1: pin your Docker image by updating locustio/locust to locustio/locust@sha256:1531d925bb25fb8a3b8f94f24253531ce6f305d3091665d78a583c762a9276a4","Warn: containerImage not pinned by hash: contrib/ca-customize-resource/docker/dockerfile:18: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: contrib/hived-config-adapter/Dockerfile:4: pin your Docker image by updating python to python@sha256:cbf49327fae903d64ab28251912fc00faea2c1baee493d347a07973a2cb50f98","Warn: containerImage not pinned by hash: examples/Dockerfiles/autobuild_docker/dockerfile:1","Warn: containerImage not pinned by hash: examples/Dockerfiles/cuda8.0-cudnn6/Dockerfile.build.mpi:27","Warn: containerImage not pinned by hash: examples/Dockerfiles/cuda8.0-cudnn6/Dockerfile.run.tensorflow:26","Warn: containerImage not pinned by hash: examples/Dockerfiles/cuda9.0-cudnn7/Dockerfile.run.tensorflow:26","Warn: containerImage not pinned by hash: src/alert-manager/build/alert-handler.common.dockerfile:4: pin your Docker image by updating node to node@sha256:a6f295c2354992f827693a2603c8b9b5b487db4da0714f5913a917ed588d6d41","Warn: containerImage not pinned by hash: src/alert-manager/build/cert-expiration-checker.common.dockerfile:4: pin your Docker image by updating python to python@sha256:cbf49327fae903d64ab28251912fc00faea2c1baee493d347a07973a2cb50f98","Warn: containerImage not pinned by hash: src/alert-manager/build/cluster-utilization.common.dockerfile:4: pin your Docker image by updating python to python@sha256:cbf49327fae903d64ab28251912fc00faea2c1baee493d347a07973a2cb50f98","Warn: containerImage not pinned by hash: src/alert-manager/build/job-status-change-notification.common.dockerfile:4: pin your Docker image by updating node to node@sha256:a6f295c2354992f827693a2603c8b9b5b487db4da0714f5913a917ed588d6d41","Warn: containerImage not pinned by hash: src/alert-manager/build/nvidia-gpu-low-perf-fixer.common.dockerfile:4","Warn: containerImage not pinned by hash: src/base-image/build/base-image.common.dockerfile:18: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: src/cleaning-image/build/cleaning-image.common.dockerfile:18","Warn: containerImage not pinned by hash: src/database-controller/build/database-controller.common.dockerfile:4: pin your Docker image by updating node to node@sha256:a6f295c2354992f827693a2603c8b9b5b487db4da0714f5913a917ed588d6d41","Warn: containerImage not pinned by hash: src/dev-box/build/dev-box.common.dockerfile:4: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: src/fluentd/build/fluentd.k8s.dockerfile:18: pin your Docker image by updating fluent/fluentd to fluent/fluentd@sha256:7eece00d1bc784ac1e9722b2580911cd3ead5afd740dad6594be945b3b1dd884","Warn: containerImage not pinned by hash: src/grafana/build/grafana.common.dockerfile:19: pin your Docker image by updating debian to debian@sha256:82bab30ed448b8e2509aabe21f40f0607d905b7fd0dec72802627a20274eba55","Warn: containerImage not pinned by hash: src/hivedscheduler/build/kube-scheduler.k8s.dockerfile:18","Warn: containerImage not pinned by hash: src/internal-storage/build/internal-storage-barrier.k8s.dockerfile:18: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: src/internal-storage/build/internal-storage-create.k8s.dockerfile:18: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: src/internal-storage/build/internal-storage-delete.k8s.dockerfile:18: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: src/job-exporter/build/job-exporter.common.dockerfile:18: pin your Docker image by updating python to python@sha256:cbf49327fae903d64ab28251912fc00faea2c1baee493d347a07973a2cb50f98","Warn: containerImage not pinned by hash: src/job-exporter/build/job-exporter.common.dockerfile:24: pin your Docker image by updating python to python@sha256:cbf49327fae903d64ab28251912fc00faea2c1baee493d347a07973a2cb50f98","Warn: containerImage not pinned by hash: src/k8s-dashboard/build/kubernetes-dashboard-amd64.common.dockerfile:18","Warn: containerImage not pinned by hash: src/log-manager/build/log-manager-cleaner.k8s.dockerfile:18: pin your Docker image by updating alpine to alpine@sha256:bc41182d7ef5ffc53a40b044e725193bc10142a1243f395ee852a8d9730fc2ad","Warn: containerImage not pinned by hash: src/log-manager/build/log-manager-nginx.k8s.dockerfile:18: pin your Docker image by updating openresty/openresty to openresty/openresty@sha256:168033f0b908546f874e1ccfcb196f39e7e0ab30562e20e35cf54252c3fa0698","Warn: containerImage not pinned by hash: src/marketplace-db/build/marketplace-db.k8s.dockerfile:4: pin your Docker image by updating docker.io/postgres to docker.io/postgres@sha256:f8816ada742348e1adfcec5c2a180b675bf6e4a294e0feb68bd70179451e1242","Warn: containerImage not pinned by hash: src/node-exporter/build/node-exporter.common.dockerfile:18: pin your Docker image by updating prom/node-exporter to prom/node-exporter@sha256:f2269e73124dd0f60a7d19a2ce1264d33d08a985aed0ee6b0b89d0be470592cd","Warn: containerImage not pinned by hash: src/openpai-runtime/build/openpai-runtime.k8s.dockerfile:18: pin your Docker image by updating openpairuntime/openpai-runtime to openpairuntime/openpai-runtime@sha256:c7862c2b3a0b4d1a93f9224b62f0e532ee3ba009000e60c44332b998a1b1ca24","Warn: containerImage not pinned by hash: src/postgresql/build/postgresql-init-client.k8s.dockerfile:18: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: src/postgresql/build/postgresql.k8s.dockerfile:18: pin your Docker image by updating postgres to postgres@sha256:f8816ada742348e1adfcec5c2a180b675bf6e4a294e0feb68bd70179451e1242","Warn: containerImage not pinned by hash: src/prometheus-pushgateway/build/metrics-cleaner.common.dockerfile:4: pin your Docker image by updating python to python@sha256:cbf49327fae903d64ab28251912fc00faea2c1baee493d347a07973a2cb50f98","Warn: containerImage not pinned by hash: src/prometheus-pushgateway/build/prometheus-pushgateway.common.dockerfile:4: pin your Docker image by updating prom/pushgateway to prom/pushgateway@sha256:3496e0f859434b60e6e6eccbc1dddf33adad9a9eb19592dc4ed4a4bf167a844d","Warn: containerImage not pinned by hash: src/prometheus/build/prometheus.common.dockerfile:18: pin your Docker image by updating prom/prometheus to prom/prometheus@sha256:aa1687dd552ed98df598cc0fed2effbc62a0f05236bc2253c65520ddd4f2afce","Warn: containerImage not pinned by hash: src/pylon/build/pylon.common.dockerfile:18: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: src/rest-server/build/rest-server.common.dockerfile:18: pin your Docker image by updating node to node@sha256:a6f295c2354992f827693a2603c8b9b5b487db4da0714f5913a917ed588d6d41","Warn: containerImage not pinned by hash: src/storage-manager/build/storage-manager.common.dockerfile:18: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: src/watchdog/build/watchdog.common.dockerfile:18: pin your Docker image by updating golang:1.13.8-alpine to golang:1.13.8-alpine@sha256:1ff752199f17b70e5f4dc2ad7f3e7843c456eb7e1407ed158ed8c237dbf1476a","Warn: containerImage not pinned by hash: src/watchdog/build/watchdog.common.dockerfile:29: pin your Docker image by updating alpine to alpine@sha256:bc41182d7ef5ffc53a40b044e725193bc10142a1243f395ee852a8d9730fc2ad","Warn: containerImage not pinned by hash: src/webportal/build/webportal.common.dockerfile:18: pin your Docker image by updating node to node@sha256:a6f295c2354992f827693a2603c8b9b5b487db4da0714f5913a917ed588d6d41","Warn: pipCommand not pinned by hash: contrib/api-stress-test/build/docker/dockerfile:3","Warn: pipCommand not pinned by hash: contrib/hived-config-adapter/Dockerfile:9","Warn: pipCommand not pinned by hash: examples/Dockerfiles/cuda8.0-cudnn6/Dockerfile.run.tensorflow:32-33","Warn: pipCommand not pinned by hash: examples/Dockerfiles/cuda8.0-cudnn6/Dockerfile.run.tensorflow:32-33","Warn: pipCommand not pinned by hash: examples/Dockerfiles/cuda9.0-cudnn7/Dockerfile.run.tensorflow:32-33","Warn: pipCommand not pinned by hash: examples/Dockerfiles/cuda9.0-cudnn7/Dockerfile.run.tensorflow:32-33","Warn: pipCommand not pinned by hash: src/alert-manager/build/cert-expiration-checker.common.dockerfile:8","Warn: pipCommand not pinned by hash: src/alert-manager/build/cluster-utilization.common.dockerfile:8","Warn: npmCommand not pinned by hash: src/database-controller/build/database-controller.common.dockerfile:16","Warn: pipCommand not pinned by hash: src/dev-box/build/dev-box.common.dockerfile:6-47","Warn: pipCommand not pinned by hash: src/dev-box/build/dev-box.common.dockerfile:6-47","Warn: pipCommand not pinned by hash: src/dev-box/build/dev-box.common.dockerfile:102-107","Warn: pipCommand not pinned by hash: src/dev-box/build/dev-box.common.dockerfile:102-107","Warn: pipCommand not pinned by hash: src/dev-box/build/dev-box.common.dockerfile:102-107","Warn: pipCommand not pinned by hash: src/dev-box/build/dev-box.common.dockerfile:102-107","Warn: pipCommand not pinned by hash: src/job-exporter/build/job-exporter.common.dockerfile:39","Warn: pipCommand not pinned by hash: src/prometheus-pushgateway/build/metrics-cleaner.common.dockerfile:8","Warn: pipCommand not pinned by hash: src/prometheus-pushgateway/build/metrics-cleaner.common.dockerfile:8","Warn: pipCommand not pinned by hash: src/pylon/build/pylon.common.dockerfile:29","Warn: npmCommand not pinned by hash: src/webportal/build/webportal.common.dockerfile:30","Warn: pipCommand not pinned by hash: contrib/kubespray/script/environment.sh:34","Warn: pipCommand not pinned by hash: contrib/kubespray/script/environment.sh:37","Warn: pipCommand not pinned by hash: contrib/kubespray/script/environment.sh:38","Warn: pipCommand not pinned by hash: contrib/kubespray/script/environment.sh:50","Warn: npmCommand not pinned by hash: tests/jenkins/test_rest_server_js_sdk.sh:25","Warn: npmCommand not pinned by hash: tests/jenkins/test_rest_server_js_sdk.sh:51","Warn: pipCommand not pinned by hash: .github/workflows/continuous-integration.yml:32","Warn: pipCommand not pinned by hash: .github/workflows/continuous-integration.yml:33","Warn: pipCommand not pinned by hash: .github/workflows/continuous-integration.yml:60","Warn: pipCommand not pinned by hash: .github/workflows/continuous-integration.yml:61","Warn: pipCommand not pinned by hash: .github/workflows/lint.yml:63","Warn: pipCommand not pinned by hash: .github/workflows/lint.yml:64","Warn: pipCommand not pinned by hash: .github/workflows/lint.yml:65","Warn: pipCommand not pinned by hash: .github/workflows/lint.yml:84","Warn: pipCommand not pinned by hash: .github/workflows/lint.yml:85","Warn: pipCommand not pinned by hash: .github/workflows/lint.yml:86","Warn: npmCommand not pinned by hash: .github/workflows/lint.yml:108","Warn: pipCommand not pinned by hash: .github/workflows/lint.yml:28","Warn: pipCommand not pinned by hash: .github/workflows/lint.yml:29","Warn: downloadThenRun not pinned by hash: .github/workflows/lint.yml:43"],"documentation":{"short":"Determines if the project has declared and pinned its dependencies.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#pinned-dependencies"}}]}