{"date":"2026-10-12","repo":{"name":"github.com/odigos-io/odigos","commit":"61cd18ebccbb923e3846ddb329d431043049bcd9"},"scorecard":{"version":"v5.6.0","commit":"61e84743356275f6ffca23b1b2f2cb945e19eb96"},"score":4.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#code-review","short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged."}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#maintained","short":"Determines if the project is \"actively maintained\"."}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#security-policy","short":"Determines if the project has published a security policy."}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: script injection with untrusted input ' github.head_ref ': .github/workflows/e2e.yaml:170"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#dangerous-workflow","short":"Determines if the project's GitHub Action workflows avoid dangerous patterns."}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/check-operator-rbac.yml:16","Info: jobLevel 'actions' permission set to 'read': .github/workflows/nightly.yml:196","Info: jobLevel 'contents' permission set to 'read': .github/workflows/nightly.yml:197","Info: jobLevel 'contents' permission set to 'read': .github/workflows/publish-modules-rhel.yml:14","Info: jobLevel 'contents' permission set to 'read': .github/workflows/publish-modules-rhel.yml:157","Info: jobLevel 'contents' permission set to 'read': .github/workflows/publish-modules.yml:128","Info: jobLevel 'contents' permission set to 'read': .github/workflows/publish-modules.yml:219","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:589","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/sync-logos-s3-bucket.yml:17","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-instrumentation-agents-version.yml:29","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/update-rust-versions.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/build-dev-images.yml:29","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/chaos-tests.yml:9","Warn: no topLevel permission defined: .github/workflows/check-links.yml:1","Warn: no topLevel permission defined: .github/workflows/check-operator-manifests.yml:1","Warn: no topLevel permission defined: .github/workflows/check-operator-rbac.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/cherry-pick.yml:8","Warn: no topLevel permission defined: .github/workflows/close-stale.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/create-feature-release.yml:21","Info: topLevel permissions set to 'read-all': .github/workflows/create-patch.yml:11","Info: topLevel permissions set to 'read-all': .github/workflows/create-pre.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/create-release-candidate.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/cross-cloud-tests.yaml:33","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Warn: no topLevel permission defined: .github/workflows/full-build.yaml:1","Warn: no topLevel permission defined: .github/workflows/generated-docs.yaml:1","Warn: no topLevel permission defined: .github/workflows/go-mod-tidy.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/golangci-lint.yml:6","Warn: no topLevel permission defined: .github/workflows/helm-lint.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/nightly.yml:36","Warn: topLevel 'contents' permission set to 'write': .github/workflows/openshift-preflight.yml:82","Warn: topLevel 'packages' permission set to 'write': .github/workflows/openshift-preflight.yml:83","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/pr-policy.yml:12","Warn: topLevel 'statuses' permission set to 'write': .github/workflows/pr-policy.yml:13","Warn: topLevel 'contents' permission set to 'write': .github/workflows/promote-rc-to-stable.yml:11","Warn: topLevel 'packages' permission set to 'write': .github/workflows/promote-rc-to-stable.yml:12","Warn: no topLevel permission defined: .github/workflows/publish-modules-rhel.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-modules.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/publish-odiglet-base-builder.yaml:14","Info: topLevel permissions set to 'read-all': .github/workflows/push-release-branch-tag.yml:8","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:14","Warn: topLevel 'packages' permission set to 'write': .github/workflows/release.yml:15","Warn: no topLevel permission defined: .github/workflows/sync-logos-s3-bucket.yml:1","Warn: no topLevel permission defined: .github/workflows/test-release-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/trigger-dependency-sync.yaml:1","Info: topLevel permissions set to 'read-all': .github/workflows/update-instrumentation-agents-version.yml:18","Warn: no topLevel permission defined: .github/workflows/update-otel-versions.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/update-release-notes.yml:28","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-rust-versions.yml:9","Warn: no topLevel permission defined: .github/workflows/verify-api-crds.yml:1","Warn: no topLevel permission defined: .github/workflows/verify-collector-ocb.yml:1","Warn: no topLevel permission defined: .github/workflows/verify-odiglet-base-builder.yaml:1","Warn: no topLevel permission defined: .github/workflows/vulnerability-scan.yaml:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#token-permissions","short":"Determines if the project's workflows follow the principle of least privilege."}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#cii-best-practices","short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge."}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#binary-artifacts","short":"Determines if the project has generated executable (binary) artifacts in the source repository."}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#license","short":"Determines if the project has defined a license."}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#fuzzing","short":"Determines if the project uses fuzzing."}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/build-dev-images.yml:32"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#packaging","short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall."}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v1.36.3 not signed: https://api.github.com/repos/odigos-io/odigos/releases/410288963","Warn: release artifact v1.38.1 not signed: https://api.github.com/repos/odigos-io/odigos/releases/405706266","Warn: release artifact v1.37.2 not signed: https://api.github.com/repos/odigos-io/odigos/releases/405707724","Warn: release artifact v1.36.2 not signed: https://api.github.com/repos/odigos-io/odigos/releases/405749919","Warn: release artifact v1.36.1 not signed: https://api.github.com/repos/odigos-io/odigos/releases/405622550","Warn: release artifact v1.36.3 does not have provenance: https://api.github.com/repos/odigos-io/odigos/releases/410288963","Warn: release artifact v1.38.1 does not have provenance: https://api.github.com/repos/odigos-io/odigos/releases/405706266","Warn: release artifact v1.37.2 does not have provenance: https://api.github.com/repos/odigos-io/odigos/releases/405707724","Warn: release artifact v1.36.2 does not have provenance: https://api.github.com/repos/odigos-io/odigos/releases/405749919","Warn: release artifact v1.36.1 does not have provenance: https://api.github.com/repos/odigos-io/odigos/releases/405622550"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#signed-releases","short":"Determines if the project cryptographically signs release artifacts."}},{"name":"Branch-Protection","score":5,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: codeowners review is not required on branch 'main'","Warn: 'last push approval' is disabled on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#branch-protection","short":"Determines if the default and release branches are protected with GitHub's branch protection settings."}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#sast","short":"Determines if the project uses static code analysis."}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-dev-images.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build-dev-images.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-dev-images.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build-dev-images.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-dev-images.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build-dev-images.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-dev-images.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build-dev-images.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:452: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:453: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:343: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:345: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:347: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:362: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:380: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:257: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:268: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:286: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:295: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:308: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:326: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:440: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:441: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:203: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:207: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:222: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:400: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:417: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:426: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:428: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:432: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:464: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:465: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-links.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-links.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-links.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-links.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-links.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-links.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-links.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-links.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-operator-manifests.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-operator-manifests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-operator-manifests.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-operator-manifests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-operator-manifests.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-operator-manifests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-operator-rbac.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-operator-rbac.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-operator-rbac.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-operator-rbac.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cherry-pick.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/cherry-pick.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cherry-pick.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/cherry-pick.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/close-stale.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/close-stale.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-feature-release.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-feature-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-feature-release.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-feature-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-feature-release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-feature-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-patch.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-patch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-patch.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-patch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-patch.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-patch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-pre.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-pre.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-pre.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-pre.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-pre.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-pre.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-pre.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-pre.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-release-candidate.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-release-candidate.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release-candidate.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-release-candidate.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-release-candidate.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-release-candidate.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-release-candidate.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-release-candidate.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-release-candidate.yml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-release-candidate.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cross-cloud-tests.yaml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/cross-cloud-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e.yaml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e.yaml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-build.yaml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/full-build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/full-build.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/full-build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/full-build.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/full-build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/full-build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/full-build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-build.yaml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/full-build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-build.yaml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/full-build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/full-build.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/full-build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generated-docs.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/generated-docs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generated-docs.yaml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/generated-docs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generated-docs.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/generated-docs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generated-docs.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/generated-docs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generated-docs.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/generated-docs.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/generated-docs.yaml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/generated-docs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-mod-tidy.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/go-mod-tidy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-mod-tidy.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/go-mod-tidy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-mod-tidy.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/go-mod-tidy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-mod-tidy.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/go-mod-tidy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/golangci-lint.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/golangci-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/golangci-lint.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/golangci-lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/golangci-lint.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/golangci-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/helm-lint.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/helm-lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/helm-lint.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/helm-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/helm-lint.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/helm-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/helm-lint.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/helm-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:239: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:266: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:203: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/openshift-preflight.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/openshift-preflight.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openshift-preflight.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/openshift-preflight.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openshift-preflight.yml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/openshift-preflight.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/openshift-preflight.yml:210: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/openshift-preflight.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openshift-preflight.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/openshift-preflight.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-policy.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/pr-policy.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-policy.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/pr-policy.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:254: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:261: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:270: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:176: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:197: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:211: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:214: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:229: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:263: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:288: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:295: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:190: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:208: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:262: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:270: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:285: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:300: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:306: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:314: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:349: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:360: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:178: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:211: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:219: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/push-release-branch-tag.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/push-release-branch-tag.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push-release-branch-tag.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/push-release-branch-tag.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/push-release-branch-tag.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/push-release-branch-tag.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:164: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:172: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:319: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:343: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:353: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:362: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:369: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:398: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:458: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:497: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:520: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:543: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:554: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:559: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:571: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:591: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:628: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-logos-s3-bucket.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/sync-logos-s3-bucket.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-logos-s3-bucket.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/sync-logos-s3-bucket.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-instrumentation-agents-version.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-instrumentation-agents-version.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-instrumentation-agents-version.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-instrumentation-agents-version.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-instrumentation-agents-version.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-instrumentation-agents-version.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-otel-versions.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-otel-versions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-otel-versions.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-otel-versions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-release-notes.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-release-notes.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-rust-versions.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-rust-versions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-rust-versions.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-rust-versions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-rust-versions.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-rust-versions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-api-crds.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/verify-api-crds.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-api-crds.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/verify-api-crds.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-collector-ocb.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/verify-collector-ocb.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-collector-ocb.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/verify-collector-ocb.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-odiglet-base-builder.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/verify-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/verify-odiglet-base-builder.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/verify-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/verify-odiglet-base-builder.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/verify-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/verify-odiglet-base-builder.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/verify-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/vulnerability-scan.yaml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/vulnerability-scan.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vulnerability-scan.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/vulnerability-scan.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vulnerability-scan.yaml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/vulnerability-scan.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vulnerability-scan.yaml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/vulnerability-scan.yaml/main?enable=pin","Warn: containerImage not pinned by hash: .devcontainer/Dockerfile:2: pin your Docker image by updating mcr.microsoft.com/devcontainers/go:1.26-trixie to mcr.microsoft.com/devcontainers/go:1.26-trixie@sha256:8b574a68147f10c022721891b5df98ea3adc7abb251806959f5cfc40e20e279b","Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating golang:1.26.9 to golang:1.26.9@sha256:d7722066f0b60ceccb6c0643cbed1f5f9e15506ac237146c95333504d7805d89","Warn: containerImage not pinned by hash: Dockerfile:53: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:ff30602252a3e92706585c7c34cd3c74028eaac4ab815e6b19f8b27562bdd7e3","Warn: containerImage not pinned by hash: Dockerfile:79: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: autoscaler/Dockerfile:13: pin your Docker image by updating registry.k8s.io/pause:3.10 to registry.k8s.io/pause:3.10@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a","Warn: containerImage not pinned by hash: autoscaler/Dockerfile:15: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:ff30602252a3e92706585c7c34cd3c74028eaac4ab815e6b19f8b27562bdd7e3","Warn: containerImage not pinned by hash: autoscaler/Dockerfile:32: pin your Docker image by updating registry.k8s.io/pause:3.10 to registry.k8s.io/pause:3.10@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a","Warn: containerImage not pinned by hash: cli/Dockerfile:1: pin your Docker image by updating alpine/helm:3.15.2 to alpine/helm:3.15.2@sha256:761b0f39033ade8ce9e52e03d9d1608d6ca9cad1c7e68dc3e005f9e4e244410e","Warn: containerImage not pinned by hash: cli/Dockerfile:20: pin your Docker image by updating golang:1.26.6 to golang:1.26.6@sha256:0d1d3a794be25f809dd2cb3160d8c73276c4056a9f8242a138e908ddeee7b6b6","Warn: containerImage not pinned by hash: cli/Dockerfile:71: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:ff30602252a3e92706585c7c34cd3c74028eaac4ab815e6b19f8b27562bdd7e3","Warn: containerImage not pinned by hash: cli/Dockerfile:93: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: cli/Dockerfile.rhel-base:3: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:ff30602252a3e92706585c7c34cd3c74028eaac4ab815e6b19f8b27562bdd7e3","Warn: containerImage not pinned by hash: collector/Dockerfile:1: pin your Docker image by updating golang:1.26.6-trixie to golang:1.26.6-trixie@sha256:b75d466dd608587fd66cca705a307ba65b889827d06ad61d6a75f0482b51b7c7","Warn: containerImage not pinned by hash: collector/Dockerfile:30: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:ff30602252a3e92706585c7c34cd3c74028eaac4ab815e6b19f8b27562bdd7e3","Warn: containerImage not pinned by hash: collector/Dockerfile:48: pin your Docker image by updating gcr.io/distroless/base:latest to gcr.io/distroless/base:latest@sha256:389cad21f73e4c37b94ffe5b13736d5a92bd5bd3c6c6b38c2be1c881e14ba2bd","Warn: containerImage not pinned by hash: collector/fast.Dockerfile:2: pin your Docker image by updating golang:1.26.6-trixie to golang:1.26.6-trixie@sha256:b75d466dd608587fd66cca705a307ba65b889827d06ad61d6a75f0482b51b7c7","Warn: containerImage not pinned by hash: collector/fast.Dockerfile:37: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:ff30602252a3e92706585c7c34cd3c74028eaac4ab815e6b19f8b27562bdd7e3","Warn: containerImage not pinned by hash: collector/fast.Dockerfile:55: pin your Docker image by updating gcr.io/distroless/base:latest to gcr.io/distroless/base:latest@sha256:389cad21f73e4c37b94ffe5b13736d5a92bd5bd3c6c6b38c2be1c881e14ba2bd","Warn: containerImage not pinned by hash: frontend/Dockerfile:1: pin your Docker image by updating node:24 to node:24@sha256:3d27e5c11e5786e309ec3e03f93ae536eb36e6e5eb3714d5eb3300a36157add0","Warn: containerImage not pinned by hash: frontend/Dockerfile:17: pin your Docker image by updating node:24 to node:24@sha256:3d27e5c11e5786e309ec3e03f93ae536eb36e6e5eb3714d5eb3300a36157add0","Warn: containerImage not pinned by hash: frontend/Dockerfile:23: pin your Docker image by updating golang:1.26.9 to golang:1.26.9@sha256:d7722066f0b60ceccb6c0643cbed1f5f9e15506ac237146c95333504d7805d89","Warn: containerImage not pinned by hash: frontend/Dockerfile:76: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:ff30602252a3e92706585c7c34cd3c74028eaac4ab815e6b19f8b27562bdd7e3","Warn: containerImage not pinned by hash: frontend/Dockerfile:95: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: helm/helm-charts.Dockerfile:6: pin your Docker image by updating alpine/helm:3.15.2 to alpine/helm:3.15.2@sha256:761b0f39033ade8ce9e52e03d9d1608d6ca9cad1c7e68dc3e005f9e4e244410e","Warn: containerImage not pinned by hash: odiglet/Dockerfile:3: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:73aaf090f3d85aa34ee199857f03fa3a95c8ede2ffd4cc2cdb5b94e566b11662","Warn: containerImage not pinned by hash: odiglet/Dockerfile:53: pin your Docker image by updating registry.odigos.io/odiglet-base:v1.21 to registry.odigos.io/odiglet-base:v1.21@sha256:987124ec3eea885ad212897bae429186333b9caaccdd3ebf38f585ba6144d5c1","Warn: containerImage not pinned by hash: odiglet/Dockerfile:87: pin your Docker image by updating registry.odigos.io/odiglet-base:v1.21 to registry.odigos.io/odiglet-base:v1.21@sha256:987124ec3eea885ad212897bae429186333b9caaccdd3ebf38f585ba6144d5c1","Warn: containerImage not pinned by hash: odiglet/Dockerfile:100: pin your Docker image by updating registry.odigos.io/odiglet-base:v1.21 to registry.odigos.io/odiglet-base:v1.21@sha256:987124ec3eea885ad212897bae429186333b9caaccdd3ebf38f585ba6144d5c1","Warn: containerImage not pinned by hash: odiglet/Dockerfile:121: pin your Docker image by updating registry.odigos.io/odiglet-base:v1.21 to registry.odigos.io/odiglet-base:v1.21@sha256:987124ec3eea885ad212897bae429186333b9caaccdd3ebf38f585ba6144d5c1","Warn: containerImage not pinned by hash: odiglet/Dockerfile:186: pin your Docker image by updating registry.odigos.io/odiglet-base:v1.21 to registry.odigos.io/odiglet-base:v1.21@sha256:987124ec3eea885ad212897bae429186333b9caaccdd3ebf38f585ba6144d5c1","Warn: containerImage not pinned by hash: odiglet/Dockerfile:194: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:73aaf090f3d85aa34ee199857f03fa3a95c8ede2ffd4cc2cdb5b94e566b11662","Warn: containerImage not pinned by hash: odiglet/Dockerfile:205: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:ff30602252a3e92706585c7c34cd3c74028eaac4ab815e6b19f8b27562bdd7e3","Warn: containerImage not pinned by hash: odiglet/Dockerfile:227: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:ff30602252a3e92706585c7c34cd3c74028eaac4ab815e6b19f8b27562bdd7e3","Warn: containerImage not pinned by hash: odiglet/base.Dockerfile:1: pin your Docker image by updating debian:bookworm-slim to debian:bookworm-slim@sha256:7c7b2c966bc9ee8cedfeef67e0e279108992c77681fa595db4a9d65c06ccc587","Warn: containerImage not pinned by hash: odiglet/base.Dockerfile:28: pin your Docker image by updating golang:1.26.6-trixie to golang:1.26.6-trixie@sha256:b75d466dd608587fd66cca705a307ba65b889827d06ad61d6a75f0482b51b7c7","Warn: containerImage not pinned by hash: odiglet/debug.Dockerfile:6: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:73aaf090f3d85aa34ee199857f03fa3a95c8ede2ffd4cc2cdb5b94e566b11662","Warn: containerImage not pinned by hash: odiglet/debug.Dockerfile:54: pin your Docker image by updating registry.odigos.io/odiglet-base:v1.21 to registry.odigos.io/odiglet-base:v1.21@sha256:987124ec3eea885ad212897bae429186333b9caaccdd3ebf38f585ba6144d5c1","Warn: containerImage not pinned by hash: odiglet/debug.Dockerfile:106: pin your Docker image by updating registry.odigos.io/odiglet-base:v1.21 to registry.odigos.io/odiglet-base:v1.21@sha256:987124ec3eea885ad212897bae429186333b9caaccdd3ebf38f585ba6144d5c1","Warn: containerImage not pinned by hash: odiglet/debug.Dockerfile:108: pin your Docker image by updating registry.fedoraproject.org/fedora-minimal:38 to registry.fedoraproject.org/fedora-minimal:38@sha256:46d9dd1088e30a5ae8cf0f3907ce97c11f59d189fc2067d96264568945a2923e","Warn: containerImage not pinned by hash: operator/Dockerfile:2: pin your Docker image by updating golang:1.26.6 to golang:1.26.6@sha256:0d1d3a794be25f809dd2cb3160d8c73276c4056a9f8242a138e908ddeee7b6b6","Warn: containerImage not pinned by hash: operator/Dockerfile:48: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:ff30602252a3e92706585c7c34cd3c74028eaac4ab815e6b19f8b27562bdd7e3","Warn: containerImage not pinned by hash: operator/Dockerfile:70: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:e2e927ec666bae08560abb3c55d0659eceabb657f56b6782ab500a9fc7f555e3","Warn: containerImage not pinned by hash: scheduler/Dockerfile:13: pin your Docker image by updating registry.k8s.io/pause:3.10 to registry.k8s.io/pause:3.10@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a","Warn: containerImage not pinned by hash: scheduler/Dockerfile:15: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:ff30602252a3e92706585c7c34cd3c74028eaac4ab815e6b19f8b27562bdd7e3","Warn: containerImage not pinned by hash: scheduler/Dockerfile:32: pin your Docker image by updating registry.k8s.io/pause:3.10 to registry.k8s.io/pause:3.10@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a","Warn: containerImage not pinned by hash: tests/common/services/cpp-http-server/Dockerfile:2: pin your Docker image by updating alpine:latest to alpine:latest@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6","Warn: containerImage not pinned by hash: tests/common/services/cpp-http-server/Dockerfile:23: pin your Docker image by updating alpine:latest to alpine:latest@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6","Warn: containerImage not pinned by hash: tests/common/services/crash-demo/Dockerfile:2: pin your Docker image by updating node:20.19.2-alpine to node:20.19.2-alpine@sha256:d3507a213936fe4ef54760a186e113db5188472d9efdf491686bd94580a1c1e8","Warn: containerImage not pinned by hash: tests/common/services/dotnet-http-server/net6-glibc.Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/dotnet/sdk:6.0 to mcr.microsoft.com/dotnet/sdk:6.0@sha256:c8fdd06e430de9f4ddd066b475ea350d771f341b77dd5ff4c2fafa748e3f2ef2","Warn: containerImage not pinned by hash: tests/common/services/dotnet-http-server/net6-glibc.Dockerfile:8: pin your Docker image by updating mcr.microsoft.com/dotnet/aspnet:6.0 to mcr.microsoft.com/dotnet/aspnet:6.0@sha256:e70c493f8af7f95bf459cb2b15c7e7a6173228929c2b7a9a6836b19377890e78","Warn: containerImage not pinned by hash: tests/common/services/dotnet-http-server/net6-musl.Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/dotnet/sdk:6.0-alpine to mcr.microsoft.com/dotnet/sdk:6.0-alpine@sha256:af5d0814eb52df44f068020e471300f311f0720fa52d211e4961f14c182d9c15","Warn: containerImage not pinned by hash: tests/common/services/dotnet-http-server/net6-musl.Dockerfile:8: pin your Docker image by updating mcr.microsoft.com/dotnet/aspnet:6.0-alpine to mcr.microsoft.com/dotnet/aspnet:6.0-alpine@sha256:02a9f6b3d99095659228667f3c88aecf4fe331935b7b861a6c17f130b3cd97a1","Warn: containerImage not pinned by hash: tests/common/services/dotnet-http-server/net8-glibc.Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/dotnet/sdk:8.0 to mcr.microsoft.com/dotnet/sdk:8.0@sha256:ec9c0a0dc5f60adc2065762050638dd5ed5facfc53716d4580a42d86027c8e80","Warn: containerImage not pinned by hash: tests/common/services/dotnet-http-server/net8-glibc.Dockerfile:7: pin your Docker image by updating mcr.microsoft.com/dotnet/aspnet:8.0 to mcr.microsoft.com/dotnet/aspnet:8.0@sha256:a3cd573ac05cf88ca496e3309cb7f7c44aa16664352d1ee41eda93154f50cdbf","Warn: containerImage not pinned by hash: tests/common/services/dotnet-http-server/net8-musl.Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/dotnet/sdk:8.0-alpine to mcr.microsoft.com/dotnet/sdk:8.0-alpine@sha256:3111b113abec80b4a8a3d4b5cebebf61a4cdab019b7e56ca3e6389e6ac4e1c8d","Warn: containerImage not pinned by hash: tests/common/services/dotnet-http-server/net8-musl.Dockerfile:7: pin your Docker image by updating mcr.microsoft.com/dotnet/aspnet:8.0-alpine to mcr.microsoft.com/dotnet/aspnet:8.0-alpine@sha256:628ffa789119d231880f32653b75aca3f528968058fdc3cdfb6969e583f8243a","Warn: containerImage not pinned by hash: tests/common/services/java-head-sampling/Dockerfile:1: pin your Docker image by updating eclipse-temurin:17.0.15_6-jdk to eclipse-temurin:17.0.15_6-jdk@sha256:341563f75e9128b0abd544928c3af43ec6c9759ff2c06485ed15c61a873d416b","Warn: containerImage not pinned by hash: tests/common/services/java-head-sampling/Dockerfile:8: pin your Docker image by updating eclipse-temurin:17.0.15_6-jre to eclipse-temurin:17.0.15_6-jre@sha256:e46d19ca8758322d37a4f26150d63e5038b5974ea999667bf698a92449cbb108","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-azul.Dockerfile:1: pin your Docker image by updating maven:3.8.5-openjdk-17 to maven:3.8.5-openjdk-17@sha256:3a9c30b3af6278a8ae0007d3a3bf00fff80ec3ed7ae4eb9bfa1772853101549b","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-azul.Dockerfile:6: pin your Docker image by updating azul/zulu-openjdk-alpine:17.0.12-jre-headless to azul/zulu-openjdk-alpine:17.0.12-jre-headless@sha256:12e335ed6d5cb4cd55ef6b5e2e769b2a77f25ced0270df1277bc2bca3dfd209e","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-latest-version.Dockerfile:1: pin your Docker image by updating maven:latest to maven:latest@sha256:d0d38ebffce1172d5c9c0be2e28691f598f9a91f578858a77d133abeb91434f9","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-latest-version.Dockerfile:6: pin your Docker image by updating eclipse-temurin:latest to eclipse-temurin:latest@sha256:8c0a84ea11c8f6ed52600fc19f1040121f2a162998e9f50a5faebbbad9172dcc","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-old-version.Dockerfile:1: pin your Docker image by updating maven:3.8.5-openjdk-11 to maven:3.8.5-openjdk-11@sha256:4e4b4e0a8bc2d07f5fef86d2b55b19fa0e8c8aa54540b34be27c711904a8014d","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-old-version.Dockerfile:6: pin your Docker image by updating eclipse-temurin:11.0.27_6-jre-jammy to eclipse-temurin:11.0.27_6-jre-jammy@sha256:d879f3a00a47675df93ecc5239e528c8bf341e0dd86d54982644f78e643c091d","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-supported-docker-env.Dockerfile:1: pin your Docker image by updating maven:3.8.5-openjdk-17 to maven:3.8.5-openjdk-17@sha256:3a9c30b3af6278a8ae0007d3a3bf00fff80ec3ed7ae4eb9bfa1772853101549b","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-supported-docker-env.Dockerfile:6: pin your Docker image by updating eclipse-temurin:17.0.12_7-jre-jammy to eclipse-temurin:17.0.12_7-jre-jammy@sha256:6c4c0938462c9678fe380bf01c7da7f4242dc20f54362f24ced3bb70f6e0183a","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-supported-manifest-env.Dockerfile:1: pin your Docker image by updating maven:3.8.5-openjdk-17 to maven:3.8.5-openjdk-17@sha256:3a9c30b3af6278a8ae0007d3a3bf00fff80ec3ed7ae4eb9bfa1772853101549b","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-supported-manifest-env.Dockerfile:6: pin your Docker image by updating eclipse-temurin:17.0.12_7-jre-jammy to eclipse-temurin:17.0.12_7-jre-jammy@sha256:6c4c0938462c9678fe380bf01c7da7f4242dc20f54362f24ced3bb70f6e0183a","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-supported-version.Dockerfile:1: pin your Docker image by updating maven:3.8.5-openjdk-17 to maven:3.8.5-openjdk-17@sha256:3a9c30b3af6278a8ae0007d3a3bf00fff80ec3ed7ae4eb9bfa1772853101549b","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-supported-version.Dockerfile:6: pin your Docker image by updating eclipse-temurin:17.0.12_7-jre-jammy to eclipse-temurin:17.0.12_7-jre-jammy@sha256:6c4c0938462c9678fe380bf01c7da7f4242dc20f54362f24ced3bb70f6e0183a","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-unique-exec.Dockerfile:2: pin your Docker image by updating maven:latest to maven:latest@sha256:d0d38ebffce1172d5c9c0be2e28691f598f9a91f578858a77d133abeb91434f9","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-unique-exec.Dockerfile:8: pin your Docker image by updating eclipse-temurin:21.0.7_6-jre-jammy to eclipse-temurin:21.0.7_6-jre-jammy@sha256:c4e6542e774de504da9b4729ff8d761287c965c1d788528ca78da30024efdb23","Warn: containerImage not pinned by hash: tests/common/services/nodejs-head-sampling/Dockerfile:1: pin your Docker image by updating node:22.17.0-alpine to node:22.17.0-alpine@sha256:fc3e945f920b7e3000cd1af86c4ae406ec70c72f328b667baf0f3a8910d69eed","Warn: containerImage not pinned by hash: tests/common/services/nodejs-http-server/dockerfile-env.Dockerfile:1: pin your Docker image by updating node:20.17.0-alpine to node:20.17.0-alpine@sha256:2d07db07a2df6830718ae2a47db6fedce6745f5bcd174c398f2acdda90a11c03","Warn: containerImage not pinned by hash: tests/common/services/nodejs-http-server/latest-version.Dockerfile:1: pin your Docker image by updating node:current-alpine to node:current-alpine@sha256:143494b1da2945f061539253adc65e4f1569ddf07da2d384c022c791a9d90a4a","Warn: containerImage not pinned by hash: tests/common/services/nodejs-http-server/manifest-env.Dockerfile:1: pin your Docker image by updating node:20.17.0-alpine to node:20.17.0-alpine@sha256:2d07db07a2df6830718ae2a47db6fedce6745f5bcd174c398f2acdda90a11c03","Warn: containerImage not pinned by hash: tests/common/services/nodejs-http-server/minimum-version.Dockerfile:1: pin your Docker image by updating node:14.0.0-alpine to node:14.0.0-alpine@sha256:628ae0898c092799f09af3f15775b9d5f2feeafc1bb2485e68d577f3ea8f267e","Warn: containerImage not pinned by hash: tests/common/services/nodejs-http-server/unsupported-version.Dockerfile:1: pin your Docker image by updating node:8.17.0-alpine to node:8.17.0-alpine@sha256:38f7bf07ffd72ac612ec8c829cb20ad416518dbb679768d7733c93175453f4d4","Warn: containerImage not pinned by hash: tests/common/services/nodejs-http-server/very-old-version.Dockerfile:1: pin your Docker image by updating node:8.17.0-alpine to node:8.17.0-alpine@sha256:38f7bf07ffd72ac612ec8c829cb20ad416518dbb679768d7733c93175453f4d4","Warn: containerImage not pinned by hash: tests/common/services/nodejs-tail-sampling/Dockerfile:1: pin your Docker image by updating node:22.17.0-alpine to node:22.17.0-alpine@sha256:fc3e945f920b7e3000cd1af86c4ae406ec70c72f328b667baf0f3a8910d69eed","Warn: containerImage not pinned by hash: tests/common/services/python-gunicorn-server/Dockerfile.python-gunicorn-server:2: pin your Docker image by updating python:3.8.20-slim to python:3.8.20-slim@sha256:1d52838af602b4b5a831beb13a0e4d073280665ea7be7f69ce2382f29c5a613f","Warn: containerImage not pinned by hash: tests/common/services/python-head-sampling/Dockerfile:1: pin your Docker image by updating python:3.11.13-alpine to python:3.11.13-alpine@sha256:801053a2c35d91edc335c4c478f682de905611fed131007715538c7552d943db","Warn: containerImage not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-alpine:1: pin your Docker image by updating python:3.10.15-alpine to python:3.10.15-alpine@sha256:039508c234f83314a3be8eed523f347f6f26816541be7caa4a9ef4a4bf1bfb66","Warn: containerImage not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-latest:1: pin your Docker image by updating python to python@sha256:ed55936fa91ebf02a0be412f9b020c1ad95eaf858985ad65753ce48e580116c9","Warn: containerImage not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-min-version:2: pin your Docker image by updating python:3.8.0-slim to python:3.8.0-slim@sha256:8e243f41e500238f78f7a29a81656114d3fe603d5c34079a462d090f71c4b225","Warn: containerImage not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-not-supported-version:2: pin your Docker image by updating python:3.6-slim to python:3.6-slim@sha256:2cfebc27956e6a55f78606864d91fe527696f9e32a724e6f9702b5f9602d0474","Warn: containerImage not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-other-agent:1: pin your Docker image by updating python to python@sha256:ed55936fa91ebf02a0be412f9b020c1ad95eaf858985ad65753ce48e580116c9","Warn: npmCommand not pinned by hash: frontend/Dockerfile:7-15","Warn: goCommand not pinned by hash: odiglet/debug.Dockerfile:73","Warn: downloadThenRun not pinned by hash: operator/Dockerfile:8","Warn: npmCommand not pinned by hash: tests/common/services/crash-demo/Dockerfile:11","Warn: nugetCommand not pinned by hash: tests/common/services/dotnet-http-server/net6-glibc.Dockerfile:5: pin your dependencies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: tests/common/services/dotnet-http-server/net6-musl.Dockerfile:5: pin your dependencies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: tests/common/services/dotnet-http-server/net8-glibc.Dockerfile:4: pin your dependencies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: tests/common/services/dotnet-http-server/net8-musl.Dockerfile:4: pin your dependencies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: npmCommand not pinned by hash: tests/common/services/nodejs-head-sampling/Dockerfile:4","Warn: npmCommand not pinned by hash: tests/common/services/nodejs-tail-sampling/Dockerfile:4","Warn: pipCommand not pinned by hash: tests/common/services/python-gunicorn-server/Dockerfile.python-gunicorn-server:13-15","Warn: pipCommand not pinned by hash: tests/common/services/python-head-sampling/Dockerfile:4","Warn: pipCommand not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-alpine:28-29","Warn: pipCommand not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-alpine:28-29","Warn: pipCommand not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-latest:11","Warn: pipCommand not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-min-version:19","Warn: pipCommand not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-not-supported-version:8","Warn: pipCommand not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-other-agent:11","Warn: pipCommand not pinned by hash: .github/workflows/generated-docs.yaml:72","Warn: pipCommand not pinned by hash: .github/workflows/generated-docs.yaml:73","Info:   1 out of 111 GitHub-owned GitHubAction dependencies pinned","Info:   3 out of 152 third-party GitHubAction dependencies pinned","Info:   0 out of   4 npmCommand dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned","Info:   0 out of   4 nugetCommand dependencies pinned","Info:   0 out of  10 pipCommand dependencies pinned","Info:   1 out of  88 containerImage dependencies pinned"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#pinned-dependencies","short":"Determines if the project has declared and pinned the dependencies of its build process."}}]}