{"date":"2022-08-15","repo":{"name":"github.com/microsoft/playwright","commit":"94c9db299da240bcd5725f5059c34eee155707d7"},"scorecard":{"version":"v4.5.0-26-g10b6052","commit":"10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93"},"score":6.5,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) out of 30 and 6 issue activity out of 30 found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#maintained"}},{"name":"Code-Review","score":9,"reason":"GitHub code reviews found for 29 commits out of the last 30 -- score normalized to 9","details":["Warn: no reviews found for commit: e64b09cc280f0cbe324c742e1cdecd7729817ebe"],"documentation":{"short":"Determines if the project requires code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no badge detected","details":null,"documentation":{"short":"Determines if the project has a CII Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"no vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":["Warn: no GitHub releases found"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy detected in current repo: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: : LICENSE:1"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"no published package detected","details":["Warn: no GitHub publishing workflow detected"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"non read-only tokens detected in GitHub workflows","details":["Warn: no topLevel permission defined: .github/workflows/cherry_pick_into_release_branch.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/cherry_pick_into_release_branch.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/infra.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/infra.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/pr_check_client_side_changes.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/pr_check_client_side_changes.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/publish_canary.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_canary.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/publish_release_docker.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_release_docker.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/publish_release_driver.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_release_driver.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/publish_release_npm.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_release_npm.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/publish_release_traceviewer.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_release_traceviewer.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/roll_browser_into_playwright.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/roll_browser_into_playwright.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/roll_chromium_build.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/roll_chromium_build.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/roll_chromium_tip_of_treebuild.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/roll_chromium_tip_of_treebuild.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/roll_driver_nodejs.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/roll_driver_nodejs.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/tests_components.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_components.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/tests_electron.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_electron.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/tests_primary.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_primary.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/tests_secondary.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/tests_stress.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_stress.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/tests_video.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_video.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/trigger_build_chromium.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/trigger_build_chromium.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/trigger_build_chromium_tip_of_tree.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/trigger_build_chromium_tip_of_tree.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/trigger_build_chromium_with_symbols.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/trigger_build_chromium_with_symbols.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/trigger_build_ffmpeg.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/trigger_build_ffmpeg.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/trigger_build_firefox.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/trigger_build_firefox.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/trigger_build_firefox_beta.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/trigger_build_firefox_beta.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/trigger_build_webkit.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/trigger_build_webkit.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/trigger_build_winldd.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/trigger_build_winldd.yml/master?enable=permissions","Warn: no topLevel permission defined: .github/workflows/trigger_tests.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/trigger_tests.yml/master?enable=permissions"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":6,"reason":"binaries present in source code","details":["Warn: binary detected: packages/playwright-core/bin/PrintDeps.exe:1","Warn: binary detected: packages/playwright-core/src/server/android/driver/gradle/wrapper/gradle-wrapper.jar:1","Warn: binary detected: tests/assets/selenium-grid/selenium-server-4.0.0-rc-1.jar:1","Warn: binary detected: tests/assets/selenium-grid/selenium-server-standalone-3.141.59.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#binary-artifacts"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: Dependabot detected"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#dependency-update-tool"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":null,"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cherry_pick_into_release_branch.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/cherry_pick_into_release_branch.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cherry_pick_into_release_branch.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/cherry_pick_into_release_branch.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/infra.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/infra.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/infra.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/infra.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr_check_client_side_changes.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/pr_check_client_side_changes.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_canary.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_canary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_canary.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_canary.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_canary.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_canary.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_canary.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_canary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_canary.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_canary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_canary.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_canary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_release_docker.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_release_docker.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_release_docker.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_release_docker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_release_docker.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_release_docker.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish_release_docker.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_release_docker.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_release_driver.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_release_driver.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_release_driver.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_release_driver.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_release_npm.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_release_npm.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_release_npm.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_release_npm.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_release_traceviewer.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_release_traceviewer.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_release_traceviewer.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/publish_release_traceviewer.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/roll_browser_into_playwright.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/roll_browser_into_playwright.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/roll_browser_into_playwright.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/roll_browser_into_playwright.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/roll_browser_into_playwright.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/roll_browser_into_playwright.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/roll_chromium_build.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/roll_chromium_build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/roll_chromium_build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/roll_chromium_build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/roll_chromium_tip_of_treebuild.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/roll_chromium_tip_of_treebuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/roll_chromium_tip_of_treebuild.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/roll_chromium_tip_of_treebuild.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/roll_driver_nodejs.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/roll_driver_nodejs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/roll_driver_nodejs.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/roll_driver_nodejs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/roll_driver_nodejs.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/roll_driver_nodejs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_components.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_components.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_components.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_components.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_electron.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_electron.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_electron.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_electron.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_electron.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_electron.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_primary.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_primary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_primary.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_primary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_primary.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_primary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_primary.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_primary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_primary.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_primary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_primary.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_primary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_primary.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_primary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_primary.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_primary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_primary.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_primary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_primary.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_primary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_primary.yml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_primary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_primary.yml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_primary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:478: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:479: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:494: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:611: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:612: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:627: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:333: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:334: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:354: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:505: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:506: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:522: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:637: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:638: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:653: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:276: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:532: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:533: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:548: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:303: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:319: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:558: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:559: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:574: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:584: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:585: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:601: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:663: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:664: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:680: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:172: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:368: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:369: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:389: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:399: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:400: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:415: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:425: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:426: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:442: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:742: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:743: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:759: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:250: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:251: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:266: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:769: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:770: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:785: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:690: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:691: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:706: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:716: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:717: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:732: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:795: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:796: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:208: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:452: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:453: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_secondary.yml:468: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_secondary.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_stress.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_stress.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_stress.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_stress.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_video.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_video.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_video.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_video.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests_video.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/kuchiki-rs/kuchiki/tests_video.yml/master?enable=pin","Warn: containerImage not pinned by hash: browser_patches/docker/firefox-beta/debian-11.dockerfile:1: pin your Docker image by updating debian to debian@sha256:82bab30ed448b8e2509aabe21f40f0607d905b7fd0dec72802627a20274eba55","Warn: containerImage not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-18.04.dockerfile:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-20.04-arm64.dockerfile:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-20.04.dockerfile:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-22.04-arm64.dockerfile:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-22.04.dockerfile:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: browser_patches/docker/firefox/debian-11.dockerfile:1: pin your Docker image by updating debian to debian@sha256:82bab30ed448b8e2509aabe21f40f0607d905b7fd0dec72802627a20274eba55","Warn: containerImage not pinned by hash: browser_patches/docker/firefox/ubuntu-18.04.dockerfile:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: browser_patches/docker/firefox/ubuntu-20.04-arm64.dockerfile:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: browser_patches/docker/firefox/ubuntu-20.04.dockerfile:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: browser_patches/docker/firefox/ubuntu-22.04-arm64.dockerfile:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: browser_patches/docker/firefox/ubuntu-22.04.dockerfile:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: browser_patches/docker/webkit/debian-11.dockerfile:1: pin your Docker image by updating debian to debian@sha256:82bab30ed448b8e2509aabe21f40f0607d905b7fd0dec72802627a20274eba55","Warn: containerImage not pinned by hash: browser_patches/docker/webkit/ubuntu-18.04.dockerfile:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: browser_patches/docker/webkit/ubuntu-20.04-arm64.dockerfile:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: browser_patches/docker/webkit/ubuntu-20.04.dockerfile:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: browser_patches/docker/webkit/ubuntu-22.04-arm64.dockerfile:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: browser_patches/docker/webkit/ubuntu-22.04.dockerfile:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: utils/docker/Dockerfile.bionic:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: utils/docker/Dockerfile.focal:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: containerImage not pinned by hash: utils/docker/Dockerfile.jammy:1: pin your Docker image by updating ubuntu to ubuntu@sha256:34fea4f31bf187bc915536831fd0afc9d214755bf700b5cdb1336c82516d154e","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox-beta/debian-11.dockerfile:23","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox-beta/debian-11.dockerfile:26","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox-beta/debian-11.dockerfile:46","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-18.04.dockerfile:29","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-18.04.dockerfile:32","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-18.04.dockerfile:52","Warn: pipCommand not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-20.04-arm64.dockerfile:31","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-20.04-arm64.dockerfile:34","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-20.04-arm64.dockerfile:54","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-20.04.dockerfile:23","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-20.04.dockerfile:26","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-20.04.dockerfile:46","Warn: pipCommand not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-22.04-arm64.dockerfile:31","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-22.04-arm64.dockerfile:34","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-22.04-arm64.dockerfile:54","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-22.04.dockerfile:23","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-22.04.dockerfile:26","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox-beta/ubuntu-22.04.dockerfile:46","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox/debian-11.dockerfile:23","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox/debian-11.dockerfile:26","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox/debian-11.dockerfile:46","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox/ubuntu-18.04.dockerfile:29","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox/ubuntu-18.04.dockerfile:32","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox/ubuntu-18.04.dockerfile:52","Warn: pipCommand not pinned by hash: browser_patches/docker/firefox/ubuntu-20.04-arm64.dockerfile:31","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox/ubuntu-20.04-arm64.dockerfile:34","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox/ubuntu-20.04-arm64.dockerfile:54","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox/ubuntu-20.04.dockerfile:23","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox/ubuntu-20.04.dockerfile:26","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox/ubuntu-20.04.dockerfile:46","Warn: pipCommand not pinned by hash: browser_patches/docker/firefox/ubuntu-22.04-arm64.dockerfile:31","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox/ubuntu-22.04-arm64.dockerfile:34","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox/ubuntu-22.04-arm64.dockerfile:54","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox/ubuntu-22.04.dockerfile:23","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox/ubuntu-22.04.dockerfile:26","Warn: downloadThenRun not pinned by hash: browser_patches/docker/firefox/ubuntu-22.04.dockerfile:46","Warn: downloadThenRun not pinned by hash: browser_patches/docker/webkit/debian-11.dockerfile:24","Warn: downloadThenRun not pinned by hash: browser_patches/docker/webkit/debian-11.dockerfile:27","Warn: downloadThenRun not pinned by hash: browser_patches/docker/webkit/ubuntu-18.04.dockerfile:35","Warn: downloadThenRun not pinned by hash: browser_patches/docker/webkit/ubuntu-18.04.dockerfile:38","Warn: pipCommand not pinned by hash: browser_patches/docker/webkit/ubuntu-20.04-arm64.dockerfile:28-32","Warn: downloadThenRun not pinned by hash: browser_patches/docker/webkit/ubuntu-20.04-arm64.dockerfile:35","Warn: downloadThenRun not pinned by hash: browser_patches/docker/webkit/ubuntu-20.04.dockerfile:21","Warn: downloadThenRun not pinned by hash: browser_patches/docker/webkit/ubuntu-20.04.dockerfile:24","Warn: pipCommand not pinned by hash: browser_patches/docker/webkit/ubuntu-22.04-arm64.dockerfile:28-32","Warn: downloadThenRun not pinned by hash: browser_patches/docker/webkit/ubuntu-22.04-arm64.dockerfile:35","Warn: downloadThenRun not pinned by hash: browser_patches/docker/webkit/ubuntu-22.04.dockerfile:21","Warn: downloadThenRun not pinned by hash: browser_patches/docker/webkit/ubuntu-22.04.dockerfile:24","Warn: downloadThenRun not pinned by hash: utils/docker/Dockerfile.bionic:9-20","Warn: npmCommand not pinned by hash: utils/docker/Dockerfile.bionic:9-20","Warn: npmCommand not pinned by hash: utils/docker/Dockerfile.bionic:34-42","Warn: downloadThenRun not pinned by hash: utils/docker/Dockerfile.focal:9-20","Warn: npmCommand not pinned by hash: utils/docker/Dockerfile.focal:9-20","Warn: npmCommand not pinned by hash: utils/docker/Dockerfile.focal:34-42","Warn: downloadThenRun not pinned by hash: utils/docker/Dockerfile.jammy:9-20","Warn: npmCommand not pinned by hash: utils/docker/Dockerfile.jammy:9-20","Warn: npmCommand not pinned by hash: utils/docker/Dockerfile.jammy:34-42","Warn: npmCommand not pinned by hash: browser_patches/chromium/goma.sh:26","Warn: npmCommand not pinned by hash: packages/web/src/third_party/highlightjs/roll.sh:22","Warn: npmCommand not pinned by hash: .github/workflows/infra.yml:23","Warn: npmCommand not pinned by hash: .github/workflows/publish_canary.yml:23","Warn: npmCommand not pinned by hash: .github/workflows/publish_canary.yml:77","Warn: npmCommand not pinned by hash: .github/workflows/publish_release_docker.yml:35","Warn: npmCommand not pinned by hash: .github/workflows/publish_release_driver.yml:19","Warn: npmCommand not pinned by hash: .github/workflows/publish_release_npm.yml:19","Warn: npmCommand not pinned by hash: .github/workflows/publish_release_traceviewer.yml:18","Warn: npmCommand not pinned by hash: .github/workflows/roll_browser_into_playwright.yml:16","Warn: npmCommand not pinned by hash: .github/workflows/tests_components.yml:34","Warn: npmCommand not pinned by hash: .github/workflows/tests_electron.yml:36","Warn: npmCommand not pinned by hash: .github/workflows/tests_primary.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/tests_primary.yml:80","Warn: npmCommand not pinned by hash: .github/workflows/tests_primary.yml:119","Warn: npmCommand not pinned by hash: .github/workflows/tests_primary.yml:142","Warn: npmCommand not pinned by hash: .github/workflows/tests_primary.yml:175","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:68","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:255","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:563","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:37","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:132","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:338","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:537","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:800","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:191","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:308","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:695","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:373","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:404","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:774","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:159","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:616","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:232","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:457","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:642","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:721","Warn: npmCommand not pinned by hash: .github/workflows/tests_secondary.yml:483","Warn: npmCommand not pinned by hash: .github/workflows/tests_stress.yml:32","Warn: npmCommand not pinned by hash: .github/workflows/tests_video.yml:29"],"documentation":{"short":"Determines if the project has declared and pinned its dependencies.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'force pushes' disabled on branch 'main'","Info: 'allow deletion' disabled on branch 'main'","Info: status check found to merge onto on branch 'main'","Warn: number of required reviewers is only 1 on branch 'main'","Info: 'force pushes' disabled on branch 'release-1.25'","Info: 'allow deletion' disabled on branch 'release-1.25'","Warn: no status checks found to merge onto branch 'release-1.25'","Warn: number of required reviewers is only 0 on branch 'release-1.25'","Info: 'force pushes' disabled on branch 'release-1.24'","Info: 'allow deletion' disabled on branch 'release-1.24'","Warn: no status checks found to merge onto branch 'release-1.24'","Warn: number of required reviewers is only 0 on branch 'release-1.24'","Info: 'force pushes' disabled on branch 'release-1.23'","Info: 'allow deletion' disabled on branch 'release-1.23'","Warn: no status checks found to merge onto branch 'release-1.23'","Warn: number of required reviewers is only 0 on branch 'release-1.23'","Info: 'force pushes' disabled on branch 'release-1.22'","Info: 'allow deletion' disabled on branch 'release-1.22'","Warn: no status checks found to merge onto branch 'release-1.22'","Warn: number of required reviewers is only 0 on branch 'release-1.22'","Info: 'force pushes' disabled on branch 'release-1.21'","Info: 'allow deletion' disabled on branch 'release-1.21'","Warn: no status checks found to merge onto branch 'release-1.21'","Warn: number of required reviewers is only 0 on branch 'release-1.21'","Info: 'force pushes' disabled on branch 'release-1.20'","Info: 'allow deletion' disabled on branch 'release-1.20'","Warn: no status checks found to merge onto branch 'release-1.20'","Warn: number of required reviewers is only 0 on branch 'release-1.20'","Info: 'force pushes' disabled on branch 'release-1.19'","Info: 'allow deletion' disabled on branch 'release-1.19'","Warn: no status checks found to merge onto branch 'release-1.19'","Warn: number of required reviewers is only 0 on branch 'release-1.19'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/10b6052acfb4f0b8136bc4876cb6f5b6f26bfe93/docs/checks.md#branch-protection"}}]}