{"date":"2026-08-17","repo":{"name":"github.com/odigos-io/odigos","commit":"8c70e45ccda190856cbd74ee9361cc6492602a34"},"scorecard":{"version":"v5.5.1-0.20260815060127-d1fab88f5463","commit":"d1fab88f54636ff366076edfc5c239f97b3c8e66"},"score":4.5,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: script injection with untrusted input ' github.head_ref ': .github/workflows/e2e.yaml:135"],"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/publish-collector-linux-packages.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/publish-modules-rhel.yml:14","Info: jobLevel 'contents' permission set to 'read': .github/workflows/publish-modules-rhel.yml:154","Info: jobLevel 'contents' permission set to 'read': .github/workflows/publish-modules.yml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/publish-modules.yml:212","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/sync-logos-s3-bucket.yml:17","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-instrumentation-agents-version.yml:29","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/update-rust-versions.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/build-dev-images.yml:29","Warn: no topLevel permission defined: .github/workflows/build.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/chaos-tests.yml:9","Warn: no topLevel permission defined: .github/workflows/check-links.yml:1","Warn: no topLevel permission defined: .github/workflows/check-operator-manifests.yml:1","Warn: no topLevel permission defined: .github/workflows/check-operator-rbac.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/cherry-pick.yml:8","Warn: no topLevel permission defined: .github/workflows/close-stale.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/create-feature-release.yml:21","Info: topLevel permissions set to 'read-all': .github/workflows/create-patch.yml:11","Info: topLevel permissions set to 'read-all': .github/workflows/create-pre.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/create-release-candidate.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/cross-cloud-tests.yaml:33","Warn: no topLevel permission defined: .github/workflows/e2e.yaml:1","Warn: no topLevel permission defined: .github/workflows/full-build.yaml:1","Warn: no topLevel permission defined: .github/workflows/generated-docs.yaml:1","Warn: no topLevel permission defined: .github/workflows/go-mod-tidy.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/golangci-lint.yml:6","Warn: no topLevel permission defined: .github/workflows/helm-lint.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/nightly.yml:36","Warn: topLevel 'contents' permission set to 'write': .github/workflows/openshift-preflight.yml:74","Warn: topLevel 'packages' permission set to 'write': .github/workflows/openshift-preflight.yml:75","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/pr-policy.yml:12","Warn: topLevel 'statuses' permission set to 'write': .github/workflows/pr-policy.yml:13","Warn: topLevel 'contents' permission set to 'write': .github/workflows/promote-rc-to-stable.yml:11","Warn: topLevel 'packages' permission set to 'write': .github/workflows/promote-rc-to-stable.yml:12","Warn: no topLevel permission defined: .github/workflows/publish-collector-linux-packages.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-modules-rhel.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-modules.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/publish-odiglet-base-builder.yaml:10","Info: topLevel permissions set to 'read-all': .github/workflows/push-release-branch-tag.yml:8","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:14","Warn: topLevel 'packages' permission set to 'write': .github/workflows/release.yml:15","Warn: no topLevel permission defined: .github/workflows/sync-logos-s3-bucket.yml:1","Warn: no topLevel permission defined: .github/workflows/test-release-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/trigger-dependency-sync.yaml:1","Info: topLevel permissions set to 'read-all': .github/workflows/update-instrumentation-agents-version.yml:18","Warn: no topLevel permission defined: .github/workflows/update-otel-versions.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/update-release-notes.yml:28","Info: topLevel 'contents' permission set to 'read': .github/workflows/update-rust-versions.yml:9","Warn: no topLevel permission defined: .github/workflows/verify-api-crds.yml:1","Warn: no topLevel permission defined: .github/workflows/verify-collector-ocb.yml:1","Warn: no topLevel permission defined: .github/workflows/verify-odiglet-base-builder.yaml:1","Warn: no topLevel permission defined: .github/workflows/vulnerability-scan.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v1.35.1 not signed: https://api.github.com/repos/odigos-io/odigos/releases/372829166","Warn: release artifact v1.34.5 not signed: https://api.github.com/repos/odigos-io/odigos/releases/372480205","Warn: release artifact v0.0.0-feat.insights.0 not signed: https://api.github.com/repos/odigos-io/odigos/releases/372325890","Warn: release artifact v0.0.0-feat.amir-testing.4 not signed: https://api.github.com/repos/odigos-io/odigos/releases/372148140","Warn: release artifact v1.36.0-pre3 not signed: https://api.github.com/repos/odigos-io/odigos/releases/371880021","Warn: release artifact v1.35.1 does not have provenance: https://api.github.com/repos/odigos-io/odigos/releases/372829166","Warn: release artifact v1.34.5 does not have provenance: https://api.github.com/repos/odigos-io/odigos/releases/372480205","Warn: release artifact v0.0.0-feat.insights.0 does not have provenance: https://api.github.com/repos/odigos-io/odigos/releases/372325890","Warn: release artifact v0.0.0-feat.amir-testing.4 does not have provenance: https://api.github.com/repos/odigos-io/odigos/releases/372148140","Warn: release artifact v1.36.0-pre3 does not have provenance: https://api.github.com/repos/odigos-io/odigos/releases/371880021"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/build.yaml:149"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-dev-images.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build-dev-images.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-dev-images.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build-dev-images.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-dev-images.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build-dev-images.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-dev-images.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build-dev-images.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:253: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:255: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:257: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:272: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:290: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:451: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:468: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:503: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:504: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:515: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:516: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:173: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:307: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:310: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:318: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:336: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:343: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:345: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:358: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:376: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:393: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:395: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:397: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:412: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:430: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:477: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:479: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:483: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:491: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:492: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:207: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yaml:221: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yaml:239: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-links.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-links.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-links.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-links.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-links.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-links.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-links.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-links.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-operator-manifests.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-operator-manifests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-operator-manifests.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-operator-manifests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-operator-manifests.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-operator-manifests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-operator-rbac.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-operator-rbac.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-operator-rbac.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/check-operator-rbac.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cherry-pick.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/cherry-pick.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/cherry-pick.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/cherry-pick.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/close-stale.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/close-stale.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-feature-release.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-feature-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-feature-release.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-feature-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-feature-release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-feature-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-patch.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-patch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-patch.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-patch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-patch.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-patch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-pre.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-pre.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-pre.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-pre.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-pre.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-pre.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-pre.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-pre.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-release-candidate.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-release-candidate.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create-release-candidate.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-release-candidate.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-release-candidate.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-release-candidate.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-release-candidate.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-release-candidate.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create-release-candidate.yml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/create-release-candidate.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cross-cloud-tests.yaml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/cross-cloud-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e.yaml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e.yaml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e.yaml:176: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e.yaml:180: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:197: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:223: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:297: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:305: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:313: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yaml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/e2e.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-build.yaml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/full-build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/full-build.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/full-build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/full-build.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/full-build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/full-build.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/full-build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-build.yaml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/full-build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-build.yaml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/full-build.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/full-build.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/full-build.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generated-docs.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/generated-docs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generated-docs.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/generated-docs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generated-docs.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/generated-docs.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/generated-docs.yaml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/generated-docs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generated-docs.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/generated-docs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generated-docs.yaml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/generated-docs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-mod-tidy.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/go-mod-tidy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-mod-tidy.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/go-mod-tidy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-mod-tidy.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/go-mod-tidy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-mod-tidy.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/go-mod-tidy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/golangci-lint.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/golangci-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/golangci-lint.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/golangci-lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/golangci-lint.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/golangci-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/helm-lint.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/helm-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/helm-lint.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/helm-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/helm-lint.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/helm-lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/helm-lint.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/helm-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openshift-preflight.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/openshift-preflight.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/openshift-preflight.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/openshift-preflight.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openshift-preflight.yml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/openshift-preflight.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openshift-preflight.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/openshift-preflight.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/openshift-preflight.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/openshift-preflight.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-policy.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/pr-policy.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-policy.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/pr-policy.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:254: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:261: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/promote-rc-to-stable.yml:270: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/promote-rc-to-stable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-collector-linux-packages.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-collector-linux-packages.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-collector-linux-packages.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-collector-linux-packages.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-collector-linux-packages.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-collector-linux-packages.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-collector-linux-packages.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-collector-linux-packages.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-collector-linux-packages.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-collector-linux-packages.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-collector-linux-packages.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-collector-linux-packages.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-collector-linux-packages.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-collector-linux-packages.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-collector-linux-packages.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-collector-linux-packages.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-collector-linux-packages.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-collector-linux-packages.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-collector-linux-packages.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-collector-linux-packages.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-collector-linux-packages.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-collector-linux-packages.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-collector-linux-packages.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-collector-linux-packages.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:163: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:173: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:194: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:208: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:211: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:214: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:285: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules-rhel.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules-rhel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:192: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:255: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:263: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:274: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:286: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:299: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:307: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:340: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-modules.yml:351: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-modules.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:173: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-odiglet-base-builder.yaml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/publish-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/push-release-branch-tag.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/push-release-branch-tag.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/push-release-branch-tag.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/push-release-branch-tag.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/push-release-branch-tag.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/push-release-branch-tag.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:173: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:270: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:291: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:300: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:307: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:336: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:396: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:419: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:442: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:453: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:458: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:470: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-logos-s3-bucket.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/sync-logos-s3-bucket.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-logos-s3-bucket.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/sync-logos-s3-bucket.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-instrumentation-agents-version.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-instrumentation-agents-version.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-instrumentation-agents-version.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-instrumentation-agents-version.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-instrumentation-agents-version.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-instrumentation-agents-version.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-otel-versions.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-otel-versions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-otel-versions.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-otel-versions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-release-notes.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-release-notes.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-rust-versions.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-rust-versions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-rust-versions.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-rust-versions.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-rust-versions.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/update-rust-versions.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-api-crds.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/verify-api-crds.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-api-crds.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/verify-api-crds.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-collector-ocb.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/verify-collector-ocb.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-collector-ocb.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/verify-collector-ocb.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-odiglet-base-builder.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/verify-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/verify-odiglet-base-builder.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/verify-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/verify-odiglet-base-builder.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/verify-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/verify-odiglet-base-builder.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/verify-odiglet-base-builder.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/vulnerability-scan.yaml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/vulnerability-scan.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vulnerability-scan.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/vulnerability-scan.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vulnerability-scan.yaml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/vulnerability-scan.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/vulnerability-scan.yaml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/odigos-io/odigos/vulnerability-scan.yaml/main?enable=pin","Warn: containerImage not pinned by hash: .devcontainer/Dockerfile:2: pin your Docker image by updating mcr.microsoft.com/devcontainers/go:1.26-trixie to mcr.microsoft.com/devcontainers/go:1.26-trixie@sha256:a05706c25c951718fec16e6fed496218b01f8fdb0b0b6d16bb45fdda62645c5c","Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating golang:1.26.6 to golang:1.26.6@sha256:0d1d3a794be25f809dd2cb3160d8c73276c4056a9f8242a138e908ddeee7b6b6","Warn: containerImage not pinned by hash: Dockerfile:51: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:7e7f79ab747bf2b452e3043dd89f388e92be4c7fdcc8b815b58adf6c99c39c95","Warn: containerImage not pinned by hash: Dockerfile:77: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: cli/Dockerfile:1: pin your Docker image by updating alpine/helm:3.15.2 to alpine/helm:3.15.2@sha256:761b0f39033ade8ce9e52e03d9d1608d6ca9cad1c7e68dc3e005f9e4e244410e","Warn: containerImage not pinned by hash: cli/Dockerfile:20: pin your Docker image by updating golang:1.26.6 to golang:1.26.6@sha256:0d1d3a794be25f809dd2cb3160d8c73276c4056a9f8242a138e908ddeee7b6b6","Warn: containerImage not pinned by hash: cli/Dockerfile:71: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:7e7f79ab747bf2b452e3043dd89f388e92be4c7fdcc8b815b58adf6c99c39c95","Warn: containerImage not pinned by hash: cli/Dockerfile:93: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: cli/Dockerfile.rhel-base:3: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:7e7f79ab747bf2b452e3043dd89f388e92be4c7fdcc8b815b58adf6c99c39c95","Warn: containerImage not pinned by hash: collector/Dockerfile:1: pin your Docker image by updating golang:1.26.6-trixie to golang:1.26.6-trixie@sha256:b75d466dd608587fd66cca705a307ba65b889827d06ad61d6a75f0482b51b7c7","Warn: containerImage not pinned by hash: collector/Dockerfile:30: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:7e7f79ab747bf2b452e3043dd89f388e92be4c7fdcc8b815b58adf6c99c39c95","Warn: containerImage not pinned by hash: collector/Dockerfile:48: pin your Docker image by updating gcr.io/distroless/base:latest to gcr.io/distroless/base:latest@sha256:f4a335ca209e1d2ee873102c17c389ad0142e3d5b21aee2817e9cc9c01d87d20","Warn: containerImage not pinned by hash: frontend/Dockerfile:1: pin your Docker image by updating node:20.19.0 to node:20.19.0@sha256:a5fb035ac1dff34a4ecaea85f90f7321185695d3fd22c12ba12f4535a4647cc5","Warn: containerImage not pinned by hash: frontend/Dockerfile:17: pin your Docker image by updating node:20.19.0 to node:20.19.0@sha256:a5fb035ac1dff34a4ecaea85f90f7321185695d3fd22c12ba12f4535a4647cc5","Warn: containerImage not pinned by hash: frontend/Dockerfile:23: pin your Docker image by updating golang:1.26.6 to golang:1.26.6@sha256:0d1d3a794be25f809dd2cb3160d8c73276c4056a9f8242a138e908ddeee7b6b6","Warn: containerImage not pinned by hash: frontend/Dockerfile:74: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:7e7f79ab747bf2b452e3043dd89f388e92be4c7fdcc8b815b58adf6c99c39c95","Warn: containerImage not pinned by hash: frontend/Dockerfile:93: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: odiglet/Dockerfile:3: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:73aaf090f3d85aa34ee199857f03fa3a95c8ede2ffd4cc2cdb5b94e566b11662","Warn: containerImage not pinned by hash: odiglet/Dockerfile:53: pin your Docker image by updating registry.odigos.io/odiglet-base:v1.20 to registry.odigos.io/odiglet-base:v1.20@sha256:536ec993a2844ecbcc6e320b6e5c06db191a064328b149aa1939042a6029229f","Warn: containerImage not pinned by hash: odiglet/Dockerfile:87: pin your Docker image by updating registry.odigos.io/odiglet-base:v1.20 to registry.odigos.io/odiglet-base:v1.20@sha256:536ec993a2844ecbcc6e320b6e5c06db191a064328b149aa1939042a6029229f","Warn: containerImage not pinned by hash: odiglet/Dockerfile:100: pin your Docker image by updating registry.odigos.io/odiglet-base:v1.20 to registry.odigos.io/odiglet-base:v1.20@sha256:536ec993a2844ecbcc6e320b6e5c06db191a064328b149aa1939042a6029229f","Warn: containerImage not pinned by hash: odiglet/Dockerfile:121: pin your Docker image by updating registry.odigos.io/odiglet-base:v1.20 to registry.odigos.io/odiglet-base:v1.20@sha256:536ec993a2844ecbcc6e320b6e5c06db191a064328b149aa1939042a6029229f","Warn: containerImage not pinned by hash: odiglet/Dockerfile:161: pin your Docker image by updating registry.odigos.io/odiglet-base:v1.20 to registry.odigos.io/odiglet-base:v1.20@sha256:536ec993a2844ecbcc6e320b6e5c06db191a064328b149aa1939042a6029229f","Warn: containerImage not pinned by hash: odiglet/Dockerfile:169: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:73aaf090f3d85aa34ee199857f03fa3a95c8ede2ffd4cc2cdb5b94e566b11662","Warn: containerImage not pinned by hash: odiglet/Dockerfile:180: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:7e7f79ab747bf2b452e3043dd89f388e92be4c7fdcc8b815b58adf6c99c39c95","Warn: containerImage not pinned by hash: odiglet/Dockerfile:201: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:7e7f79ab747bf2b452e3043dd89f388e92be4c7fdcc8b815b58adf6c99c39c95","Warn: containerImage not pinned by hash: odiglet/base.Dockerfile:1: pin your Docker image by updating debian:bookworm-slim to debian:bookworm-slim@sha256:abd67ffcfa541b485a3dff59865ab629aa048a6c613e639d36e7456b0b229241","Warn: containerImage not pinned by hash: odiglet/base.Dockerfile:25: pin your Docker image by updating golang:1.26.6-trixie to golang:1.26.6-trixie@sha256:b75d466dd608587fd66cca705a307ba65b889827d06ad61d6a75f0482b51b7c7","Warn: containerImage not pinned by hash: odiglet/debug.Dockerfile:6: pin your Docker image by updating busybox:1.36.1 to busybox:1.36.1@sha256:73aaf090f3d85aa34ee199857f03fa3a95c8ede2ffd4cc2cdb5b94e566b11662","Warn: containerImage not pinned by hash: odiglet/debug.Dockerfile:54: pin your Docker image by updating registry.odigos.io/odiglet-base:v1.20 to registry.odigos.io/odiglet-base:v1.20@sha256:536ec993a2844ecbcc6e320b6e5c06db191a064328b149aa1939042a6029229f","Warn: containerImage not pinned by hash: odiglet/debug.Dockerfile:106: pin your Docker image by updating registry.odigos.io/odiglet-base:v1.20 to registry.odigos.io/odiglet-base:v1.20@sha256:536ec993a2844ecbcc6e320b6e5c06db191a064328b149aa1939042a6029229f","Warn: containerImage not pinned by hash: odiglet/debug.Dockerfile:108: pin your Docker image by updating registry.fedoraproject.org/fedora-minimal:38 to registry.fedoraproject.org/fedora-minimal:38@sha256:46d9dd1088e30a5ae8cf0f3907ce97c11f59d189fc2067d96264568945a2923e","Warn: containerImage not pinned by hash: operator/Dockerfile:2: pin your Docker image by updating golang:1.26.6 to golang:1.26.6@sha256:0d1d3a794be25f809dd2cb3160d8c73276c4056a9f8242a138e908ddeee7b6b6","Warn: containerImage not pinned by hash: operator/Dockerfile:48: pin your Docker image by updating registry.access.redhat.com/ubi9/ubi-micro:latest to registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:7e7f79ab747bf2b452e3043dd89f388e92be4c7fdcc8b815b58adf6c99c39c95","Warn: containerImage not pinned by hash: operator/Dockerfile:70: pin your Docker image by updating gcr.io/distroless/static:nonroot to gcr.io/distroless/static:nonroot@sha256:f7f8f729987ad0fdf6b05eeeae94b26e6a0f613bdf46feea7fc40f7bd72953e6","Warn: containerImage not pinned by hash: tests/common/services/cpp-http-server/Dockerfile:2: pin your Docker image by updating alpine:latest to alpine:latest@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b","Warn: containerImage not pinned by hash: tests/common/services/cpp-http-server/Dockerfile:23: pin your Docker image by updating alpine:latest to alpine:latest@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b","Warn: containerImage not pinned by hash: tests/common/services/crash-demo/Dockerfile:2: pin your Docker image by updating node:20.19.2-alpine to node:20.19.2-alpine@sha256:d3507a213936fe4ef54760a186e113db5188472d9efdf491686bd94580a1c1e8","Warn: containerImage not pinned by hash: tests/common/services/dotnet-http-server/net6-glibc.Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/dotnet/sdk:6.0 to mcr.microsoft.com/dotnet/sdk:6.0@sha256:c8fdd06e430de9f4ddd066b475ea350d771f341b77dd5ff4c2fafa748e3f2ef2","Warn: containerImage not pinned by hash: tests/common/services/dotnet-http-server/net6-glibc.Dockerfile:8: pin your Docker image by updating mcr.microsoft.com/dotnet/aspnet:6.0 to mcr.microsoft.com/dotnet/aspnet:6.0@sha256:e70c493f8af7f95bf459cb2b15c7e7a6173228929c2b7a9a6836b19377890e78","Warn: containerImage not pinned by hash: tests/common/services/dotnet-http-server/net6-musl.Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/dotnet/sdk:6.0-alpine to mcr.microsoft.com/dotnet/sdk:6.0-alpine@sha256:af5d0814eb52df44f068020e471300f311f0720fa52d211e4961f14c182d9c15","Warn: containerImage not pinned by hash: tests/common/services/dotnet-http-server/net6-musl.Dockerfile:8: pin your Docker image by updating mcr.microsoft.com/dotnet/aspnet:6.0-alpine to mcr.microsoft.com/dotnet/aspnet:6.0-alpine@sha256:02a9f6b3d99095659228667f3c88aecf4fe331935b7b861a6c17f130b3cd97a1","Warn: containerImage not pinned by hash: tests/common/services/dotnet-http-server/net8-glibc.Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/dotnet/sdk:8.0 to mcr.microsoft.com/dotnet/sdk:8.0@sha256:306301580fcaa5b445180e759db59309979002d1000669cb4cf58a567d0014bc","Warn: containerImage not pinned by hash: tests/common/services/dotnet-http-server/net8-glibc.Dockerfile:7: pin your Docker image by updating mcr.microsoft.com/dotnet/aspnet:8.0 to mcr.microsoft.com/dotnet/aspnet:8.0@sha256:b0beb9cc1dee1c1b0749796110d4734292071b814207ad0d4f40611f7db04f7b","Warn: containerImage not pinned by hash: tests/common/services/dotnet-http-server/net8-musl.Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/dotnet/sdk:8.0-alpine to mcr.microsoft.com/dotnet/sdk:8.0-alpine@sha256:8a80a27ddac789b4cb6d09d244f9c8d840da599c5ad22f7233c04be470e55261","Warn: containerImage not pinned by hash: tests/common/services/dotnet-http-server/net8-musl.Dockerfile:7: pin your Docker image by updating mcr.microsoft.com/dotnet/aspnet:8.0-alpine to mcr.microsoft.com/dotnet/aspnet:8.0-alpine@sha256:b288317d8ed45bb763fa95dbc807cf9d36e3bf9373ec2fac6b6548675f1f4b23","Warn: containerImage not pinned by hash: tests/common/services/java-head-sampling/Dockerfile:1: pin your Docker image by updating eclipse-temurin:17.0.15_6-jdk to eclipse-temurin:17.0.15_6-jdk@sha256:341563f75e9128b0abd544928c3af43ec6c9759ff2c06485ed15c61a873d416b","Warn: containerImage not pinned by hash: tests/common/services/java-head-sampling/Dockerfile:8: pin your Docker image by updating eclipse-temurin:17.0.15_6-jre to eclipse-temurin:17.0.15_6-jre@sha256:e46d19ca8758322d37a4f26150d63e5038b5974ea999667bf698a92449cbb108","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-azul.Dockerfile:1: pin your Docker image by updating maven:3.8.5-openjdk-17 to maven:3.8.5-openjdk-17@sha256:3a9c30b3af6278a8ae0007d3a3bf00fff80ec3ed7ae4eb9bfa1772853101549b","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-azul.Dockerfile:6: pin your Docker image by updating azul/zulu-openjdk-alpine:17.0.12-jre-headless to azul/zulu-openjdk-alpine:17.0.12-jre-headless@sha256:12e335ed6d5cb4cd55ef6b5e2e769b2a77f25ced0270df1277bc2bca3dfd209e","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-latest-version.Dockerfile:1: pin your Docker image by updating maven:latest to maven:latest@sha256:0e4c2f1db01ff5317f4c24ddb868a8581d54ba638f4de410f6bd45f52078e907","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-latest-version.Dockerfile:6: pin your Docker image by updating eclipse-temurin:latest to eclipse-temurin:latest@sha256:85765cc23cda09cdfc9af5cbd8dfeb8d4df3e4634a6a89936013962051aa2df8","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-old-version.Dockerfile:1: pin your Docker image by updating maven:3.8.5-openjdk-11 to maven:3.8.5-openjdk-11@sha256:4e4b4e0a8bc2d07f5fef86d2b55b19fa0e8c8aa54540b34be27c711904a8014d","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-old-version.Dockerfile:6: pin your Docker image by updating eclipse-temurin:11.0.27_6-jre-jammy to eclipse-temurin:11.0.27_6-jre-jammy@sha256:d879f3a00a47675df93ecc5239e528c8bf341e0dd86d54982644f78e643c091d","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-supported-docker-env.Dockerfile:1: pin your Docker image by updating maven:3.8.5-openjdk-17 to maven:3.8.5-openjdk-17@sha256:3a9c30b3af6278a8ae0007d3a3bf00fff80ec3ed7ae4eb9bfa1772853101549b","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-supported-docker-env.Dockerfile:6: pin your Docker image by updating eclipse-temurin:17.0.12_7-jre-jammy to eclipse-temurin:17.0.12_7-jre-jammy@sha256:6c4c0938462c9678fe380bf01c7da7f4242dc20f54362f24ced3bb70f6e0183a","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-supported-manifest-env.Dockerfile:1: pin your Docker image by updating maven:3.8.5-openjdk-17 to maven:3.8.5-openjdk-17@sha256:3a9c30b3af6278a8ae0007d3a3bf00fff80ec3ed7ae4eb9bfa1772853101549b","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-supported-manifest-env.Dockerfile:6: pin your Docker image by updating eclipse-temurin:17.0.12_7-jre-jammy to eclipse-temurin:17.0.12_7-jre-jammy@sha256:6c4c0938462c9678fe380bf01c7da7f4242dc20f54362f24ced3bb70f6e0183a","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-supported-version.Dockerfile:1: pin your Docker image by updating maven:3.8.5-openjdk-17 to maven:3.8.5-openjdk-17@sha256:3a9c30b3af6278a8ae0007d3a3bf00fff80ec3ed7ae4eb9bfa1772853101549b","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-supported-version.Dockerfile:6: pin your Docker image by updating eclipse-temurin:17.0.12_7-jre-jammy to eclipse-temurin:17.0.12_7-jre-jammy@sha256:6c4c0938462c9678fe380bf01c7da7f4242dc20f54362f24ced3bb70f6e0183a","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-unique-exec.Dockerfile:2: pin your Docker image by updating maven:latest to maven:latest@sha256:0e4c2f1db01ff5317f4c24ddb868a8581d54ba638f4de410f6bd45f52078e907","Warn: containerImage not pinned by hash: tests/common/services/java-http-server/java-unique-exec.Dockerfile:8: pin your Docker image by updating eclipse-temurin:21.0.7_6-jre-jammy to eclipse-temurin:21.0.7_6-jre-jammy@sha256:c4e6542e774de504da9b4729ff8d761287c965c1d788528ca78da30024efdb23","Warn: containerImage not pinned by hash: tests/common/services/nodejs-head-sampling/Dockerfile:1: pin your Docker image by updating node:22.17.0-alpine to node:22.17.0-alpine@sha256:fc3e945f920b7e3000cd1af86c4ae406ec70c72f328b667baf0f3a8910d69eed","Warn: containerImage not pinned by hash: tests/common/services/nodejs-http-server/dockerfile-env.Dockerfile:1: pin your Docker image by updating node:20.17.0-alpine to node:20.17.0-alpine@sha256:2d07db07a2df6830718ae2a47db6fedce6745f5bcd174c398f2acdda90a11c03","Warn: containerImage not pinned by hash: tests/common/services/nodejs-http-server/latest-version.Dockerfile:1: pin your Docker image by updating node:current-alpine to node:current-alpine@sha256:aadf416b2cdce311a8811ba3f0608a61b77dbf997500e2eafe781b51f6a0b019","Warn: containerImage not pinned by hash: tests/common/services/nodejs-http-server/manifest-env.Dockerfile:1: pin your Docker image by updating node:20.17.0-alpine to node:20.17.0-alpine@sha256:2d07db07a2df6830718ae2a47db6fedce6745f5bcd174c398f2acdda90a11c03","Warn: containerImage not pinned by hash: tests/common/services/nodejs-http-server/minimum-version.Dockerfile:1: pin your Docker image by updating node:14.0.0-alpine to node:14.0.0-alpine@sha256:628ae0898c092799f09af3f15775b9d5f2feeafc1bb2485e68d577f3ea8f267e","Warn: containerImage not pinned by hash: tests/common/services/nodejs-http-server/unsupported-version.Dockerfile:1: pin your Docker image by updating node:8.17.0-alpine to node:8.17.0-alpine@sha256:38f7bf07ffd72ac612ec8c829cb20ad416518dbb679768d7733c93175453f4d4","Warn: containerImage not pinned by hash: tests/common/services/nodejs-http-server/very-old-version.Dockerfile:1: pin your Docker image by updating node:8.17.0-alpine to node:8.17.0-alpine@sha256:38f7bf07ffd72ac612ec8c829cb20ad416518dbb679768d7733c93175453f4d4","Warn: containerImage not pinned by hash: tests/common/services/nodejs-tail-sampling/Dockerfile:1: pin your Docker image by updating node:22.17.0-alpine to node:22.17.0-alpine@sha256:fc3e945f920b7e3000cd1af86c4ae406ec70c72f328b667baf0f3a8910d69eed","Warn: containerImage not pinned by hash: tests/common/services/python-gunicorn-server/Dockerfile.python-gunicorn-server:2: pin your Docker image by updating python:3.8.20-slim to python:3.8.20-slim@sha256:1d52838af602b4b5a831beb13a0e4d073280665ea7be7f69ce2382f29c5a613f","Warn: containerImage not pinned by hash: tests/common/services/python-head-sampling/Dockerfile:1: pin your Docker image by updating python:3.11.13-alpine to python:3.11.13-alpine@sha256:801053a2c35d91edc335c4c478f682de905611fed131007715538c7552d943db","Warn: containerImage not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-alpine:1: pin your Docker image by updating python:3.10.15-alpine to python:3.10.15-alpine@sha256:039508c234f83314a3be8eed523f347f6f26816541be7caa4a9ef4a4bf1bfb66","Warn: containerImage not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-latest:1: pin your Docker image by updating python to python@sha256:4fad23465a06cc5149a541fbec6f87e234a64dc0550f6bfdd2d290d8f03240df","Warn: containerImage not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-min-version:2: pin your Docker image by updating python:3.8.0-slim to python:3.8.0-slim@sha256:8e243f41e500238f78f7a29a81656114d3fe603d5c34079a462d090f71c4b225","Warn: containerImage not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-not-supported-version:2: pin your Docker image by updating python:3.6-slim to python:3.6-slim@sha256:2cfebc27956e6a55f78606864d91fe527696f9e32a724e6f9702b5f9602d0474","Warn: containerImage not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-other-agent:1: pin your Docker image by updating python to python@sha256:4fad23465a06cc5149a541fbec6f87e234a64dc0550f6bfdd2d290d8f03240df","Warn: npmCommand not pinned by hash: frontend/Dockerfile:7-15","Warn: goCommand not pinned by hash: odiglet/debug.Dockerfile:73","Warn: downloadThenRun not pinned by hash: operator/Dockerfile:8","Warn: npmCommand not pinned by hash: tests/common/services/crash-demo/Dockerfile:11","Warn: nugetCommand not pinned by hash: tests/common/services/dotnet-http-server/net6-glibc.Dockerfile:5: pin your dependencies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: tests/common/services/dotnet-http-server/net6-musl.Dockerfile:5: pin your dependencies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: tests/common/services/dotnet-http-server/net8-glibc.Dockerfile:4: pin your dependencies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: nugetCommand not pinned by hash: tests/common/services/dotnet-http-server/net8-musl.Dockerfile:4: pin your dependencies by either enabling central package management (https://learn.microsoft.com/nuget/consume-packages/Central-Package-Management) or using a lockfile (https://learn.microsoft.com/nuget/consume-packages/package-references-in-project-files#locking-dependencies)","Warn: npmCommand not pinned by hash: tests/common/services/nodejs-head-sampling/Dockerfile:4","Warn: npmCommand not pinned by hash: tests/common/services/nodejs-tail-sampling/Dockerfile:4","Warn: pipCommand not pinned by hash: tests/common/services/python-gunicorn-server/Dockerfile.python-gunicorn-server:13-15","Warn: pipCommand not pinned by hash: tests/common/services/python-head-sampling/Dockerfile:4","Warn: pipCommand not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-alpine:28-29","Warn: pipCommand not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-alpine:28-29","Warn: pipCommand not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-latest:11","Warn: pipCommand not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-min-version:19","Warn: pipCommand not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-not-supported-version:8","Warn: pipCommand not pinned by hash: tests/common/services/python-http-server/Dockerfile.python-other-agent:11","Warn: pipCommand not pinned by hash: .github/workflows/generated-docs.yaml:72","Warn: pipCommand not pinned by hash: .github/workflows/generated-docs.yaml:73","Info:   1 out of 112 GitHub-owned GitHubAction dependencies pinned","Info:   3 out of 163 third-party GitHubAction dependencies pinned","Info:   0 out of   4 nugetCommand dependencies pinned","Info:   0 out of  10 pipCommand dependencies pinned","Info:   1 out of  78 containerImage dependencies pinned","Info:   0 out of   4 npmCommand dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#pinned-dependencies"}}]}