{"date":"2026-08-17","repo":{"name":"github.com/open-metadata/OpenMetadata","commit":"7b4160c14b55f8cb570176949eedc909252411e6"},"scorecard":{"version":"v5.5.1-0.20260815060127-d1fab88f5463","commit":"d1fab88f54636ff366076edfc5c239f97b3c8e66"},"score":4.6,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#maintained"}},{"name":"Code-Review","score":9,"reason":"Found 28/30 approved changesets -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/airflow-apis-tests.yml:70","Warn: untrusted code checkout '${{ github.event_name == 'merge_group' && github.sha || github.event.pull_request.head.sha }}': .github/workflows/integration-tests-mysql-elasticsearch.yml:118","Warn: untrusted code checkout '${{ github.event_name == 'merge_group' && github.sha || github.event.pull_request.head.sha }}': .github/workflows/integration-tests-mysql-elasticsearch.yml:223","Warn: untrusted code checkout '${{ github.event_name == 'merge_group' && github.sha || github.event.pull_request.head.sha }}': .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:135","Warn: untrusted code checkout '${{ github.event_name == 'merge_group' && github.sha || github.event.pull_request.head.sha }}': .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:240","Warn: untrusted code checkout '${{ github.event_name == 'merge_group' && github.sha || github.event.pull_request.head.sha }}': .github/workflows/integration-tests-postgres-opensearch.yml:118","Warn: untrusted code checkout '${{ github.event_name == 'merge_group' && github.sha || github.event.pull_request.head.sha }}': .github/workflows/integration-tests-postgres-opensearch.yml:223","Warn: untrusted code checkout '${{ github.event_name == 'merge_group' && github.sha || github.event.pull_request.head.sha }}': .github/workflows/java-checkstyle.yml:70","Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/maven-build-collate.yml:77","Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/maven-sonar-build.yml:60","Warn: untrusted code checkout '${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.sha || github.sha }}': .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:281","Warn: untrusted code checkout '${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.sha || github.sha }}': .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:201","Warn: untrusted code checkout '${{ github.event_name == 'pull_request_target' && github.event.pull_request.base.sha || github.sha }}': .github/workflows/playwright-postgresql-e2e.yml:153","Warn: untrusted code checkout '${{ github.event_name == 'merge_group' && github.sha || github.event.pull_request.head.sha }}': .github/workflows/py-checkstyle.yml:70","Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/py-operator-build-test.yml:65","Warn: untrusted code checkout '${{ github.event_name == 'merge_group' && github.sha || github.event.pull_request.head.sha }}': .github/workflows/ui-checkstyle.yml:117","Warn: untrusted code checkout '${{ github.event_name == 'merge_group' && github.sha || github.event.pull_request.head.sha }}': .github/workflows/validate-jsons-yamls.yml:53","Warn: untrusted code checkout '${{ github.event_name == 'merge_group' && github.sha || github.event.pull_request.head.sha }}': .github/workflows/yarn-coverage.yml:87"],"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/claude.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/claude.yml:22","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/claude.yml:23","Info: jobLevel 'issues' permission set to 'read': .github/workflows/claude.yml:24","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/codeql.yml:16","Info: jobLevel 'actions' permission set to 'read': .github/workflows/mysql-nightly-e2e.yml:64","Info: jobLevel 'contents' permission set to 'read': .github/workflows/mysql-nightly-e2e.yml:65","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/mysql-nightly-e2e.yml:66","Info: jobLevel 'checks' permission set to 'read': .github/workflows/mysql-nightly-e2e.yml:67","Info: jobLevel 'checks' permission set to 'read': .github/workflows/playwright-e2e-reusable.yml:165","Info: jobLevel 'contents' permission set to 'read': .github/workflows/playwright-e2e-reusable.yml:166","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/playwright-e2e-reusable.yml:167","Info: jobLevel 'contents' permission set to 'read': .github/workflows/playwright-e2e-reusable.yml:1174","Info: jobLevel 'contents' permission set to 'read': .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:132","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:133","Info: jobLevel 'checks' permission set to 'read': .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:131","Info: jobLevel 'contents' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:143","Info: jobLevel 'actions' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:142","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/playwright-postgresql-e2e.yml:495","Info: jobLevel 'actions' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:96","Info: jobLevel 'contents' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:97","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:98","Info: jobLevel 'checks' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:99","Info: jobLevel 'contents' permission set to 'read': .github/workflows/playwright-visual.yml:45","Info: jobLevel 'actions' permission set to 'read': .github/workflows/postgresql-nightly-e2e.yml:65","Info: jobLevel 'contents' permission set to 'read': .github/workflows/postgresql-nightly-e2e.yml:66","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/postgresql-nightly-e2e.yml:67","Info: jobLevel 'checks' permission set to 'read': .github/workflows/postgresql-nightly-e2e.yml:68","Info: jobLevel 'contents' permission set to 'read': .github/workflows/security-scan.yml:35","Info: jobLevel 'contents' permission set to 'read': .github/workflows/storybook-nightly.yml:50","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/typescript-type-generation.yml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ui-checkstyle.yml:93","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/update-playwright-e2e-docs.yml:20","Info: topLevel 'contents' permission set to 'read': .github/workflows/airflow-apis-tests.yml:22","Warn: topLevel 'contents' permission set to 'write': .github/workflows/auto-cherry-pick-labeled-prs.yaml:13","Warn: no topLevel permission defined: .github/workflows/claude.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/data-access-request-e2e.yml:20","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/data-access-request-e2e.yml:21","Warn: topLevel 'checks' permission set to 'write': .github/workflows/data-access-request-e2e.yml:22","Warn: no topLevel permission defined: .github/workflows/docker-k8s-operator.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-openmetadata-db.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-openmetadata-ingestion-base-slim.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-openmetadata-ingestion-base.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-openmetadata-ingestion.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-openmetadata-postgres.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-openmetadata-server.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/git-create-release-branch.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/harness-integrity.yml:40","Info: topLevel 'contents' permission set to 'read': .github/workflows/integration-tests-mysql-elasticsearch.yml:39","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/integration-tests-mysql-elasticsearch.yml:40","Warn: topLevel 'checks' permission set to 'write': .github/workflows/integration-tests-mysql-elasticsearch.yml:41","Info: topLevel 'contents' permission set to 'read': .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:54","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:55","Warn: topLevel 'checks' permission set to 'write': .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:56","Info: topLevel 'contents' permission set to 'read': .github/workflows/integration-tests-postgres-opensearch.yml:39","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/integration-tests-postgres-opensearch.yml:40","Warn: topLevel 'checks' permission set to 'write': .github/workflows/integration-tests-postgres-opensearch.yml:41","Info: topLevel 'contents' permission set to 'read': .github/workflows/java-checkstyle.yml:29","Info: topLevel 'contents' permission set to 'read': .github/workflows/java-playwright-nightly.yml:101","Warn: topLevel 'checks' permission set to 'write': .github/workflows/java-playwright-nightly.yml:102","Info: topLevel 'contents' permission set to 'read': .github/workflows/label-connector.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/maven-build-collate.yml:48","Warn: topLevel 'checks' permission set to 'write': .github/workflows/maven-build-collate.yml:49","Info: topLevel 'contents' permission set to 'read': .github/workflows/maven-sonar-build.yml:31","Warn: topLevel 'checks' permission set to 'write': .github/workflows/maven-sonar-build.yml:32","Info: topLevel 'checks' permission set to 'read': .github/workflows/merge-queue-dequeue-report.yml:33","Info: topLevel 'contents' permission set to 'read': .github/workflows/merge-queue-dequeue-report.yml:34","Info: topLevel 'contents' permission set to 'read': .github/workflows/monitor-slack-link.yml:22","Info: topLevel 'actions' permission set to 'read': .github/workflows/mysql-nightly-e2e.yml:55","Info: topLevel 'contents' permission set to 'read': .github/workflows/mysql-nightly-e2e.yml:56","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/mysql-nightly-e2e.yml:57","Info: topLevel 'contents' permission set to 'read': .github/workflows/openmetadata-service-unit-tests.yml:24","Warn: topLevel 'checks' permission set to 'write': .github/workflows/openmetadata-service-unit-tests.yml:25","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/playwright-e2e-reusable.yml:132","Info: topLevel 'actions' permission set to 'read': .github/workflows/playwright-e2e-reusable.yml:130","Info: topLevel 'contents' permission set to 'read': .github/workflows/playwright-e2e-reusable.yml:131","Info: topLevel 'contents' permission set to 'read': .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:109","Info: topLevel 'actions' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:84","Info: topLevel 'contents' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:85","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:86","Info: topLevel 'actions' permission set to 'read': .github/workflows/playwright-postgresql-pr-comment.yml:22","Info: topLevel 'contents' permission set to 'read': .github/workflows/playwright-postgresql-pr-comment.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/playwright-search-nightly.yml:18","Info: topLevel 'contents' permission set to 'read': .github/workflows/playwright-sso-login-nightly.yml:36","Warn: no topLevel permission defined: .github/workflows/playwright-visual.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/populate-playwright-apt-cache.yml:62","Info: topLevel 'actions' permission set to 'read': .github/workflows/postgresql-nightly-e2e.yml:56","Info: topLevel 'contents' permission set to 'read': .github/workflows/postgresql-nightly-e2e.yml:57","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/postgresql-nightly-e2e.yml:58","Info: topLevel 'contents' permission set to 'read': .github/workflows/pr-metadata-validation.yml:45","Info: topLevel 'issues' permission set to 'read': .github/workflows/pr-metadata-validation.yml:46","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish-maven-package.yml:28","Info: topLevel 'contents' permission set to 'read': .github/workflows/py-checkstyle.yml:25","Info: topLevel 'contents' permission set to 'read': .github/workflows/py-cli-e2e-tests.yml:32","Info: topLevel 'contents' permission set to 'read': .github/workflows/py-operator-build-test.yml:25","Info: topLevel 'contents' permission set to 'read': .github/workflows/py-sonarcloud-nightly.yml:20","Info: topLevel 'contents' permission set to 'read': .github/workflows/py-tests-postgres.yml:20","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/py-tests-postgres.yml:21","Warn: no topLevel permission defined: .github/workflows/py-tests-shared.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/py-tests.yml:20","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/py-tests.yml:21","Warn: no topLevel permission defined: .github/workflows/python-packages-publish.yml:1","Warn: no topLevel permission defined: .github/workflows/security-scan.yml:1","Warn: no topLevel permission defined: .github/workflows/storybook-nightly.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/team-labeler.yml:5","Warn: no topLevel permission defined: .github/workflows/trivy-scan-ingestion-base-slim-image.yml:1","Warn: no topLevel permission defined: .github/workflows/trivy-scan-ingestion-image.yml:1","Warn: no topLevel permission defined: .github/workflows/trivy-scan-openmetadata-server.yml:1","Warn: no topLevel permission defined: .github/workflows/typescript-type-generation.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ui-checkstyle.yml:29","Info: topLevel 'contents' permission set to 'read': .github/workflows/ui-sonarcloud-nightly.yml:20","Warn: no topLevel permission defined: .github/workflows/update-playwright-e2e-docs.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-docker-compose-quickstart.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-jsons-yamls.yml:26","Info: topLevel 'contents' permission set to 'read': .github/workflows/yarn-coverage.yml:17"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 2.0.0-rc2-release not signed: https://api.github.com/repos/open-metadata/OpenMetadata/releases/369756808","Warn: release artifact 1.13.3-release not signed: https://api.github.com/repos/open-metadata/OpenMetadata/releases/362889317","Warn: release artifact 2.0.0-rc1-release not signed: https://api.github.com/repos/open-metadata/OpenMetadata/releases/362239039","Warn: release artifact 1.13.2-release not signed: https://api.github.com/repos/open-metadata/OpenMetadata/releases/361663833","Warn: release artifact 1.12.14-release not signed: https://api.github.com/repos/open-metadata/OpenMetadata/releases/360997379","Warn: release artifact 2.0.0-rc2-release does not have provenance: https://api.github.com/repos/open-metadata/OpenMetadata/releases/369756808","Warn: release artifact 1.13.3-release does not have provenance: https://api.github.com/repos/open-metadata/OpenMetadata/releases/362889317","Warn: release artifact 2.0.0-rc1-release does not have provenance: https://api.github.com/repos/open-metadata/OpenMetadata/releases/362239039","Warn: release artifact 1.13.2-release does not have provenance: https://api.github.com/repos/open-metadata/OpenMetadata/releases/361663833","Warn: release artifact 1.12.14-release does not have provenance: https://api.github.com/repos/open-metadata/OpenMetadata/releases/360997379"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-k8s-operator.yml:77"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#binary-artifacts"}},{"name":"SAST","score":10,"reason":"SAST tool detected","details":["Info: SAST configuration detected: Sonar","Warn: 27 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#sast"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: a command can only contain words and redirects; encountered (: examples/python-sdk/data-quality/start:56","Warn: third-party GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-cherry-pick-labeled-prs.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/auto-cherry-pick-labeled-prs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-cherry-pick-labeled-prs.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/auto-cherry-pick-labeled-prs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-cherry-pick-labeled-prs.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/auto-cherry-pick-labeled-prs.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/claude.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/claude.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/claude.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/claude.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/codeql.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/data-access-request-e2e.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/data-access-request-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/data-access-request-e2e.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/data-access-request-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/data-access-request-e2e.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/data-access-request-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/data-access-request-e2e.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/data-access-request-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-db.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-db.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-db.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-db.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion-base-slim.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion-base-slim.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion-base-slim.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion-base-slim.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion-base.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion-base.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion-base.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion-base.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion-base.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion-base.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-postgres.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-postgres.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-postgres.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-postgres.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-server.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-server.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-server.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-server.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-server.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-server.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-server.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-server.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-server.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-server.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-server.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-server.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/git-create-release-branch.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/git-create-release-branch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/git-create-release-branch.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/git-create-release-branch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/harness-integrity.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/harness-integrity.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/harness-integrity.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/harness-integrity.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:212: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:224: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:238: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:251: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:386: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:399: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:417: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:229: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:241: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:247: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:255: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:268: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:403: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:416: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:434: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:212: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:224: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:238: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:251: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:386: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:399: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:417: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-checkstyle.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-checkstyle.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-checkstyle.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-checkstyle.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-checkstyle.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-checkstyle.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-checkstyle.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-checkstyle.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:216: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:232: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:238: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:266: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:328: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:337: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:346: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:356: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:367: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:386: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:397: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:402: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:408: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:436: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:445: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:453: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/label-connector.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/label-connector.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/label-connector.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/label-connector.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/maven-build-collate.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-build-collate.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/maven-build-collate.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-build-collate.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-build-collate.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-build-collate.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/maven-build-collate.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-build-collate.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/maven-sonar-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-sonar-build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/maven-sonar-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-sonar-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-sonar-build.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-sonar-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-sonar-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-sonar-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-sonar-build.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-sonar-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/monitor-slack-link.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/monitor-slack-link.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/monitor-slack-link.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/monitor-slack-link.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:173: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:524: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:557: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:572: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:586: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:592: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:613: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:644: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:724: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:865: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:886: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:905: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:913: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:940: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:958: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1075: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1117: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1125: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1132: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1141: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1195: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1210: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1217: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1225: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1232: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1285: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1301: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1326: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1337: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1621: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1633: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1644: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1668: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1682: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1726: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1753: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1759: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1775: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1797: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:239: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:318: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:375: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:384: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:404: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:427: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:434: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:487: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:501: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:738: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:760: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:783: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:806: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:815: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:202: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:221: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:247: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:282: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:327: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:393: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:164: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:192: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:232: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:321: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:357: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:384: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:420: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:459: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:499: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:506: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-pr-comment.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-pr-comment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-pr-comment.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-pr-comment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-pr-comment.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-pr-comment.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/playwright-search-nightly.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-search-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-search-nightly.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-search-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-search-nightly.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-search-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-search-nightly.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-search-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-search-nightly.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-search-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/playwright-sso-login-nightly.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-sso-login-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-sso-login-nightly.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-sso-login-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-sso-login-nightly.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-sso-login-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-sso-login-nightly.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-sso-login-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-sso-login-nightly.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-sso-login-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-visual.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-visual.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-visual.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-visual.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-visual.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-visual.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-visual.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-visual.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/populate-playwright-apt-cache.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/populate-playwright-apt-cache.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/populate-playwright-apt-cache.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/populate-playwright-apt-cache.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/populate-playwright-apt-cache.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/populate-playwright-apt-cache.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/populate-playwright-apt-cache.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/populate-playwright-apt-cache.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/populate-playwright-apt-cache.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/populate-playwright-apt-cache.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/populate-playwright-apt-cache.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/populate-playwright-apt-cache.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/populate-playwright-apt-cache.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/populate-playwright-apt-cache.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-maven-package.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/publish-maven-package.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-maven-package.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/publish-maven-package.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-maven-package.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/publish-maven-package.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-checkstyle.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-checkstyle.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-checkstyle.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-checkstyle.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-checkstyle.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-checkstyle.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-checkstyle.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-checkstyle.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:219: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:233: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:242: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:282: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:321: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:379: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:382: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:398: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:419: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-operator-build-test.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-operator-build-test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-operator-build-test.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-operator-build-test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-operator-build-test.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-operator-build-test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-operator-build-test.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-operator-build-test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:207: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:223: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:167: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:216: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:276: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:360: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:371: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:384: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:443: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:452: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:492: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:560: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:568: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:584: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-tests-shared.yml:615: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-tests-shared.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python-packages-publish.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/python-packages-publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python-packages-publish.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/python-packages-publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/security-scan.yml:172: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:270: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:289: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:297: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/security-scan.yml:385: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/security-scan.yml:442: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/storybook-nightly.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/storybook-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/storybook-nightly.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/storybook-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/team-labeler.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/team-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/team-labeler.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/team-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/team-labeler.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/team-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/trivy-scan-ingestion-base-slim-image.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/trivy-scan-ingestion-base-slim-image.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/trivy-scan-ingestion-base-slim-image.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/trivy-scan-ingestion-base-slim-image.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/trivy-scan-ingestion-base-slim-image.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/trivy-scan-ingestion-base-slim-image.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/trivy-scan-ingestion-image.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/trivy-scan-ingestion-image.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/trivy-scan-ingestion-image.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/trivy-scan-ingestion-image.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/trivy-scan-ingestion-image.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/trivy-scan-ingestion-image.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/trivy-scan-openmetadata-server.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/trivy-scan-openmetadata-server.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/trivy-scan-openmetadata-server.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/trivy-scan-openmetadata-server.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/typescript-type-generation.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/typescript-type-generation.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/typescript-type-generation.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/typescript-type-generation.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/typescript-type-generation.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/typescript-type-generation.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/typescript-type-generation.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/typescript-type-generation.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/typescript-type-generation.yml:176: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/typescript-type-generation.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/typescript-type-generation.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/typescript-type-generation.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:384: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:394: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ui-sonarcloud-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ui-sonarcloud-nightly.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ui-sonarcloud-nightly.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ui-sonarcloud-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-playwright-e2e-docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/update-playwright-e2e-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-playwright-e2e-docs.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/update-playwright-e2e-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-docker-compose-quickstart.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/validate-docker-compose-quickstart.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-jsons-yamls.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/validate-jsons-yamls.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-jsons-yamls.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/validate-jsons-yamls.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-jsons-yamls.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/validate-jsons-yamls.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-jsons-yamls.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/validate-jsons-yamls.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: containerImage not pinned by hash: .devcontainer/dev/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/devcontainers/base:ubuntu-22.04@sha256:81380e4c9c14e8a629ff39029639e4b7893e67400246fa7782a0fe7dc193a02a","Warn: containerImage not pinned by hash: docker/development/Dockerfile:13: pin your Docker image by updating alpine:3 to alpine:3@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b","Warn: containerImage not pinned by hash: docker/development/Dockerfile:22: pin your Docker image by updating alpine:3 to alpine:3@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b","Warn: containerImage not pinned by hash: docker/development/mock-oidc-provider/Dockerfile:1: pin your Docker image by updating node:20-alpine to node:20-alpine@sha256:fb4cd12c85ee03686f6af5362a0b0d56d50c58a04632e6c0fb8363f609372293","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile:13: pin your Docker image by updating alpine:3 to alpine:3@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile:23: pin your Docker image by updating alpine:3 to alpine:3@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile.fuseki-alpine:2: pin your Docker image by updating eclipse-temurin:17-jre to eclipse-temurin:17-jre@sha256:cbc584b3776ab71410502680e6e85b5f1cd18c92c7bd680c10bc2a40bf678558","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile.fuseki-arm64:2: pin your Docker image by updating eclipse-temurin:17-jre-jammy to eclipse-temurin:17-jre-jammy@sha256:1e38389ecd9e5c444e40d4385be4a4a5f56a836a38a6e41c099810c32ec1c595","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile.fuseki-multiarch:3: pin your Docker image by updating eclipse-temurin:17-jre-jammy to eclipse-temurin:17-jre-jammy@sha256:1e38389ecd9e5c444e40d4385be4a4a5f56a836a38a6e41c099810c32ec1c595","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile.fuseki-simple:2: pin your Docker image by updating alpine:latest to alpine:latest@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile.fuseki-simple:14: pin your Docker image by updating eclipse-temurin:17-jre-jammy to eclipse-temurin:17-jre-jammy@sha256:1e38389ecd9e5c444e40d4385be4a4a5f56a836a38a6e41c099810c32ec1c595","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile.fuseki-working:3: pin your Docker image by updating eclipse-temurin:17-jre-jammy to eclipse-temurin:17-jre-jammy@sha256:1e38389ecd9e5c444e40d4385be4a4a5f56a836a38a6e41c099810c32ec1c595","Warn: containerImage not pinned by hash: docker/images/minimal-ubuntu/Dockerfile:15: pin your Docker image by updating ubuntu:xenial-20210416 to ubuntu:xenial-20210416@sha256:eed7e1076bbc1f342c4474c718e5438af4784f59a4e88ad687dbb98483b59ee4","Warn: containerImage not pinned by hash: docker/mysql/Dockerfile_mysql:1: pin your Docker image by updating mysql:8.0 to mysql:8.0@sha256:7dcddc01f13bab2f15cde676d44d01f61fc9f99fe7785e86196dfc07d358ae2b","Warn: containerImage not pinned by hash: docker/postgresql/Dockerfile_postgres:1: pin your Docker image by updating postgres:15 to postgres:15@sha256:5f72c7b5bd616308ccfd2e74d6be16fb06364e5eecbb815fe9dc6ab9761d2111","Warn: containerImage not pinned by hash: docker/rdf-store/Dockerfile:6: pin your Docker image by updating eclipse-temurin:17-jre-jammy to eclipse-temurin:17-jre-jammy@sha256:1e38389ecd9e5c444e40d4385be4a4a5f56a836a38a6e41c099810c32ec1c595","Warn: containerImage not pinned by hash: docker/storybook/Dockerfile:16: pin your Docker image by updating node:22.17-alpine to node:22.17-alpine@sha256:5539840ce9d013fa13e3b9814c9353024be7ac75aca5db6d039504a56c04ea59","Warn: containerImage not pinned by hash: docker/storybook/Dockerfile:34: pin your Docker image by updating node:22.17-alpine to node:22.17-alpine@sha256:5539840ce9d013fa13e3b9814c9353024be7ac75aca5db6d039504a56c04ea59","Warn: containerImage not pinned by hash: ingestion/Dockerfile:1: pin your Docker image by updating mysql:8.3 to mysql:8.3@sha256:9de9d54fecee6253130e65154b930978b1fcc336bcc86dfd06e89b72a2588ebe","Warn: containerImage not pinned by hash: ingestion/Dockerfile:3: pin your Docker image by updating apache/airflow:3.3.0-python3.12 to apache/airflow:3.3.0-python3.12@sha256:96e99f25815f533b298a4d53f283adf5c84c27334ea16ef232777cb800bddf10","Warn: containerImage not pinned by hash: ingestion/Dockerfile.ci:1: pin your Docker image by updating mysql:8.3 to mysql:8.3@sha256:9de9d54fecee6253130e65154b930978b1fcc336bcc86dfd06e89b72a2588ebe","Warn: containerImage not pinned by hash: ingestion/Dockerfile.ci:3: pin your Docker image by updating apache/airflow:3.3.0-python3.12 to apache/airflow:3.3.0-python3.12@sha256:96e99f25815f533b298a4d53f283adf5c84c27334ea16ef232777cb800bddf10","Warn: containerImage not pinned by hash: ingestion/operators/docker/Dockerfile:1: pin your Docker image by updating python:3.12-slim-trixie to python:3.12-slim-trixie@sha256:2c941e860699f878900b0edc2403613c234d4b32eda3cc9fa7036991a2a63c4a","Warn: containerImage not pinned by hash: ingestion/operators/docker/Dockerfile.ci:1: pin your Docker image by updating python:3.12-slim-trixie to python:3.12-slim-trixie@sha256:2c941e860699f878900b0edc2403613c234d4b32eda3cc9fa7036991a2a63c4a","Warn: containerImage not pinned by hash: ingestion/tests/integration/airflow/Dockerfile:15: pin your Docker image by updating apache/airflow:3.3.0-python3.10 to apache/airflow:3.3.0-python3.10@sha256:c9d0b5b2fb74cb897b6c0ae6987d27e9a90b566bf785b70af1c7180bf72bcd09","Warn: containerImage not pinned by hash: ingestion/tests/integration/trino/trino/Dockerfile:2","Warn: containerImage not pinned by hash: openmetadata-k8s-operator/Dockerfile:1: pin your Docker image by updating eclipse-temurin:21-jre-alpine to eclipse-temurin:21-jre-alpine@sha256:3f08b13888f595cc49edabea7250ba69499ba25602b267da591720769400e08c","Warn: npmCommand not pinned by hash: docker/development/mock-oidc-provider/Dockerfile:6","Warn: pipCommand not pinned by hash: docker/images/minimal-ubuntu/Dockerfile:40-41","Warn: npmCommand not pinned by hash: docker/storybook/Dockerfile:38","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:108","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:122","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:124","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:125","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:126","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:130-132","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:138","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:141","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:148","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:178","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:107","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:119","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:122","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:125","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:129","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:135","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:136","Warn: downloadThenRun not pinned by hash: ingestion/Dockerfile.ci:139-146","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:150","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:153-155","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:158","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:167","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:175","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:195","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile:146","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile:165","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile:167","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile:171","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile:172","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile:176-178","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile:184","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile:235","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:147","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:166","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:168","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:173","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:174","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:177","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:178","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:181-183","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:192","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:243","Warn: pipCommand not pinned by hash: ingestion/tests/integration/airflow/Dockerfile:23-25","Warn: pipCommand not pinned by hash: .devcontainer/dev/post-create.sh:80","Warn: downloadThenRun not pinned by hash: scripts/reindex-perf-bootstrap.sh:88","Warn: pipCommand not pinned by hash: .github/workflows/monitor-slack-link.yml:47","Warn: pipCommand not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:167","Warn: pipCommand not pinned by hash: .github/workflows/py-tests-shared.yml:574","Warn: npmCommand not pinned by hash: .github/workflows/security-scan.yml:205","Warn: npmCommand not pinned by hash: .github/workflows/ui-sonarcloud-nightly.yml:86","Warn: pipCommand not pinned by hash: .github/workflows/validate-jsons-yamls.yml:72","Warn: pipCommand not pinned by hash: .github/workflows/validate-jsons-yamls.yml:80","Warn: npmCommand not pinned by hash: .github/workflows/yarn-coverage.yml:152","Info:   1 out of 263 GitHub-owned GitHubAction dependencies pinned","Info:  14 out of 129 third-party GitHubAction dependencies pinned","Info:   1 out of  28 containerImage dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned","Info:   0 out of  49 pipCommand dependencies pinned","Info:   0 out of   2 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch '2.0.0-rc2'","Warn: branch protection not enabled for branch '2.0.0-rc1'","Info: 'allow deletion' disabled on branch 'main'","Warn: 'allow deletion' enabled on branch '1.13.3'","Warn: 'allow deletion' enabled on branch '1.13.2'","Warn: 'allow deletion' enabled on branch '1.12.14'","Info: 'allow deletion' disabled on branch '1.12.13'","Warn: 'allow deletion' enabled on branch '1.13.1'","Info: 'allow deletion' disabled on branch '1.12.12'","Info: 'allow deletion' disabled on branch '1.12.11'","Warn: 'allow deletion' enabled on branch '1.13.0'","Warn: 'allow deletion' enabled on branch '1.12.10'","Warn: 'allow deletion' enabled on branch '1.12.9'","Warn: 'allow deletion' enabled on branch '1.12.8'","Info: 'allow deletion' disabled on branch '1.12.7'","Warn: 'allow deletion' enabled on branch '1.13.0-rc1'","Warn: 'allow deletion' enabled on branch '1.12.6'","Warn: 'allow deletion' enabled on branch '1.12.5'","Warn: 'allow deletion' enabled on branch '1.12.4'","Info: 'allow deletion' disabled on branch '1.12.3'","Warn: 'allow deletion' enabled on branch '1.11.14'","Info: 'allow deletion' disabled on branch '1.11.13'","Info: 'allow deletion' disabled on branch '1.11.12'","Warn: 'allow deletion' enabled on branch '1.11.11'","Warn: 'allow deletion' enabled on branch '1.12.1'","Warn: 'allow deletion' enabled on branch '1.12.0'","Info: 'allow deletion' disabled on branch '1.11.10'","Warn: 'allow deletion' enabled on branch '1.11.9'","Warn: 'allow deletion' enabled on branch '1.12.0-rc1'","Warn: 'allow deletion' enabled on branch '1.11.8'","Warn: 'allow deletion' enabled on branch '1.11.7'","Info: 'force pushes' disabled on branch 'main'","Warn: 'force pushes' enabled on branch '1.13.3'","Warn: 'force pushes' enabled on branch '1.13.2'","Warn: 'force pushes' enabled on branch '1.12.14'","Info: 'force pushes' disabled on branch '1.12.13'","Warn: 'force pushes' enabled on branch '1.13.1'","Info: 'force pushes' disabled on branch '1.12.12'","Info: 'force pushes' disabled on branch '1.12.11'","Warn: 'force pushes' enabled on branch '1.13.0'","Warn: 'force pushes' enabled on branch '1.12.10'","Warn: 'force pushes' enabled on branch '1.12.9'","Warn: 'force pushes' enabled on branch '1.12.8'","Info: 'force pushes' disabled on branch '1.12.7'","Warn: 'force pushes' enabled on branch '1.13.0-rc1'","Warn: 'force pushes' enabled on branch '1.12.6'","Warn: 'force pushes' enabled on branch '1.12.5'","Warn: 'force pushes' enabled on branch '1.12.4'","Info: 'force pushes' disabled on branch '1.12.3'","Warn: 'force pushes' enabled on branch '1.11.14'","Info: 'force pushes' disabled on branch '1.11.13'","Info: 'force pushes' disabled on branch '1.11.12'","Warn: 'force pushes' enabled on branch '1.11.11'","Warn: 'force pushes' enabled on branch '1.12.1'","Warn: 'force pushes' enabled on branch '1.12.0'","Info: 'force pushes' disabled on branch '1.11.10'","Warn: 'force pushes' enabled on branch '1.11.9'","Warn: 'force pushes' enabled on branch '1.12.0-rc1'","Warn: 'force pushes' enabled on branch '1.11.8'","Warn: 'force pushes' enabled on branch '1.11.7'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'main'","Warn: required approving review count is 1 on branch 'main'","Warn: branch '1.13.3' does not require approvers","Warn: branch '1.13.2' does not require approvers","Warn: branch '1.12.14' does not require approvers","Warn: branch '1.12.13' does not require approvers","Warn: branch '1.13.1' does not require approvers","Warn: branch '1.12.12' does not require approvers","Warn: branch '1.12.11' does not require approvers","Warn: branch '1.13.0' does not require approvers","Warn: branch '1.12.10' does not require approvers","Warn: branch '1.12.9' does not require approvers","Warn: branch '1.12.8' does not require approvers","Warn: branch '1.12.7' does not require approvers","Warn: branch '1.13.0-rc1' does not require approvers","Warn: branch '1.12.6' does not require approvers","Warn: branch '1.12.5' does not require approvers","Warn: branch '1.12.4' does not require approvers","Warn: branch '1.12.3' does not require approvers","Warn: branch '1.11.14' does not require approvers","Warn: branch '1.11.13' does not require approvers","Warn: branch '1.11.12' does not require approvers","Warn: branch '1.11.11' does not require approvers","Warn: branch '1.12.1' does not require approvers","Warn: branch '1.12.0' does not require approvers","Warn: branch '1.11.10' does not require approvers","Warn: branch '1.11.9' does not require approvers","Warn: branch '1.12.0-rc1' does not require approvers","Warn: branch '1.11.8' does not require approvers","Warn: branch '1.11.7' does not require approvers","Info: codeowner review is required on branch 'main'","Warn: codeowners review is not required on branch '1.13.3'","Warn: codeowners review is not required on branch '1.13.2'","Warn: codeowners review is not required on branch '1.12.14'","Warn: codeowners review is not required on branch '1.12.13'","Warn: codeowners review is not required on branch '1.13.1'","Warn: codeowners review is not required on branch '1.12.12'","Warn: codeowners review is not required on branch '1.12.11'","Warn: codeowners review is not required on branch '1.13.0'","Warn: codeowners review is not required on branch '1.12.10'","Warn: codeowners review is not required on branch '1.12.9'","Warn: codeowners review is not required on branch '1.12.8'","Warn: codeowners review is not required on branch '1.12.7'","Warn: codeowners review is not required on branch '1.13.0-rc1'","Warn: codeowners review is not required on branch '1.12.6'","Warn: codeowners review is not required on branch '1.12.5'","Warn: codeowners review is not required on branch '1.12.4'","Warn: codeowners review is not required on branch '1.12.3'","Warn: codeowners review is not required on branch '1.11.14'","Warn: codeowners review is not required on branch '1.11.13'","Warn: codeowners review is not required on branch '1.11.12'","Warn: codeowners review is not required on branch '1.11.11'","Warn: codeowners review is not required on branch '1.12.1'","Warn: codeowners review is not required on branch '1.12.0'","Warn: codeowners review is not required on branch '1.11.10'","Warn: codeowners review is not required on branch '1.11.9'","Warn: codeowners review is not required on branch '1.12.0-rc1'","Warn: codeowners review is not required on branch '1.11.8'","Warn: codeowners review is not required on branch '1.11.7'","Warn: 'last push approval' is disabled on branch 'main'","Warn: 'up-to-date branches' is disabled on branch 'main'","Info: status check found to merge onto on branch 'main'","Warn: no status checks found to merge onto branch '1.13.3'","Warn: no status checks found to merge onto branch '1.13.2'","Warn: no status checks found to merge onto branch '1.12.14'","Warn: no status checks found to merge onto branch '1.12.13'","Warn: no status checks found to merge onto branch '1.13.1'","Warn: no status checks found to merge onto branch '1.12.12'","Warn: no status checks found to merge onto branch '1.12.11'","Warn: no status checks found to merge onto branch '1.13.0'","Warn: no status checks found to merge onto branch '1.12.10'","Warn: no status checks found to merge onto branch '1.12.9'","Warn: no status checks found to merge onto branch '1.12.8'","Warn: no status checks found to merge onto branch '1.12.7'","Warn: no status checks found to merge onto branch '1.13.0-rc1'","Warn: no status checks found to merge onto branch '1.12.6'","Warn: no status checks found to merge onto branch '1.12.5'","Warn: no status checks found to merge onto branch '1.12.4'","Warn: no status checks found to merge onto branch '1.12.3'","Warn: no status checks found to merge onto branch '1.11.14'","Warn: no status checks found to merge onto branch '1.11.13'","Warn: no status checks found to merge onto branch '1.11.12'","Warn: no status checks found to merge onto branch '1.11.11'","Warn: no status checks found to merge onto branch '1.12.1'","Warn: no status checks found to merge onto branch '1.12.0'","Warn: no status checks found to merge onto branch '1.11.10'","Warn: no status checks found to merge onto branch '1.11.9'","Warn: no status checks found to merge onto branch '1.12.0-rc1'","Warn: no status checks found to merge onto branch '1.11.8'","Warn: no status checks found to merge onto branch '1.11.7'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#branch-protection"}}]}