{"date":"2026-10-12","repo":{"name":"github.com/open-metadata/OpenMetadata","commit":"9b5f77e0d8a8a6bc63d2579e6a5486777d5ad3e6"},"scorecard":{"version":"v5.6.0","commit":"61e84743356275f6ffca23b1b2f2cb945e19eb96"},"score":4.8,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#maintained","short":"Determines if the project is \"actively maintained\"."}},{"name":"Code-Review","score":9,"reason":"Found 19/20 approved changesets -- score normalized to 9","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#code-review","short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged."}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#security-policy","short":"Determines if the project has published a security policy."}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#license","short":"Determines if the project has defined a license."}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/airflow-apis-tests.yml:70","Warn: untrusted code checkout '${{ github.event_name == 'merge_group' && github.sha || github.event.pull_request.head.sha }}': .github/workflows/java-checkstyle.yml:70","Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/maven-build-collate.yml:118","Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/maven-sonar-build.yml:60","Warn: untrusted code checkout '${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.sha || github.sha }}': .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:205","Warn: untrusted code checkout '${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.sha || github.sha }}': .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:317","Warn: untrusted code checkout '${{ github.event_name == 'merge_group' && github.sha || github.event.pull_request.head.sha }}': .github/workflows/py-checkstyle.yml:71","Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/py-operator-build-test.yml:65","Warn: untrusted code checkout '${{ github.event_name == 'merge_group' && github.sha || github.event.pull_request.head.sha }}': .github/workflows/ui-checkstyle.yml:130","Warn: untrusted code checkout '${{ github.event_name == 'merge_group' && github.sha || github.event.pull_request.head.sha }}': .github/workflows/validate-jsons-yamls.yml:53","Warn: untrusted code checkout '${{ github.event_name == 'merge_group' && github.sha || github.event.pull_request.head.sha }}': .github/workflows/yarn-coverage.yml:91"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#dangerous-workflow","short":"Determines if the project's GitHub Action workflows avoid dangerous patterns."}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#cii-best-practices","short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge."}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 2.0.5-release not signed: https://api.github.com/repos/open-metadata/OpenMetadata/releases/406800459","Warn: release artifact 2.0.4-release not signed: https://api.github.com/repos/open-metadata/OpenMetadata/releases/404378759","Warn: release artifact 2.0.3-release not signed: https://api.github.com/repos/open-metadata/OpenMetadata/releases/399732002","Warn: release artifact 2.0.2-release not signed: https://api.github.com/repos/open-metadata/OpenMetadata/releases/389649079","Warn: release artifact 1.13.6-release not signed: https://api.github.com/repos/open-metadata/OpenMetadata/releases/386866507","Warn: release artifact 2.0.5-release does not have provenance: https://api.github.com/repos/open-metadata/OpenMetadata/releases/406800459","Warn: release artifact 2.0.4-release does not have provenance: https://api.github.com/repos/open-metadata/OpenMetadata/releases/404378759","Warn: release artifact 2.0.3-release does not have provenance: https://api.github.com/repos/open-metadata/OpenMetadata/releases/399732002","Warn: release artifact 2.0.2-release does not have provenance: https://api.github.com/repos/open-metadata/OpenMetadata/releases/389649079","Warn: release artifact 1.13.6-release does not have provenance: https://api.github.com/repos/open-metadata/OpenMetadata/releases/386866507"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#signed-releases","short":"Determines if the project cryptographically signs release artifacts."}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/claude.yml:22","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/claude.yml:23","Info: jobLevel 'issues' permission set to 'read': .github/workflows/claude.yml:24","Info: jobLevel 'actions' permission set to 'read': .github/workflows/claude.yml:26","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/codeql.yml:16","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/docker-k8s-operator.yml:67","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/docker-openmetadata-server.yml:64","Info: jobLevel 'actions' permission set to 'read': .github/workflows/mysql-nightly-e2e.yml:64","Info: jobLevel 'contents' permission set to 'read': .github/workflows/mysql-nightly-e2e.yml:65","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/mysql-nightly-e2e.yml:66","Info: jobLevel 'checks' permission set to 'read': .github/workflows/mysql-nightly-e2e.yml:67","Info: found token with 'none' permissions: .github/workflows/playwright-e2e-reusable.yml:1","Info: jobLevel 'contents' permission set to 'read': .github/workflows/playwright-e2e-reusable.yml:1342","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/playwright-impact-map-drift.yml:83","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:137","Info: jobLevel 'checks' permission set to 'read': .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:135","Info: jobLevel 'contents' permission set to 'read': .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:136","Info: jobLevel 'actions' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:726","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/playwright-postgresql-e2e.yml:727","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/playwright-postgresql-e2e.yml:889","Info: jobLevel 'actions' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:90","Info: jobLevel 'contents' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:91","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:92","Info: jobLevel 'checks' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:93","Info: jobLevel 'contents' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:119","Info: jobLevel 'actions' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:116","Info: jobLevel 'checks' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:118","Info: jobLevel 'contents' permission set to 'read': .github/workflows/playwright-sso-login-nightly.yml:552","Info: jobLevel 'contents' permission set to 'read': .github/workflows/playwright-sso-login-nightly.yml:142","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/playwright-sso-login-nightly.yml:143","Info: jobLevel 'contents' permission set to 'read': .github/workflows/playwright-visual.yml:123","Info: jobLevel 'contents' permission set to 'read': .github/workflows/populate-playwright-caches.yml:239","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/populate-playwright-caches.yml:240","Info: jobLevel 'checks' permission set to 'read': .github/workflows/populate-playwright-caches.yml:241","Info: jobLevel 'actions' permission set to 'read': .github/workflows/populate-playwright-caches.yml:238","Info: jobLevel 'contents' permission set to 'read': .github/workflows/postgresql-nightly-e2e.yml:66","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/postgresql-nightly-e2e.yml:67","Info: jobLevel 'checks' permission set to 'read': .github/workflows/postgresql-nightly-e2e.yml:68","Info: jobLevel 'actions' permission set to 'read': .github/workflows/postgresql-nightly-e2e.yml:65","Info: jobLevel 'contents' permission set to 'read': .github/workflows/security-scan.yml:35","Info: jobLevel 'contents' permission set to 'read': .github/workflows/security-scan.yml:167","Info: jobLevel 'actions' permission set to 'read': .github/workflows/security-scan.yml:290","Info: jobLevel 'contents' permission set to 'read': .github/workflows/storybook-nightly.yml:50","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/typescript-type-generation.yml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ui-checkstyle.yml:100","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/update-playwright-e2e-docs.yml:20","Info: topLevel 'contents' permission set to 'read': .github/workflows/airflow-apis-tests.yml:22","Warn: topLevel 'contents' permission set to 'write': .github/workflows/auto-revert-release.yml:43","Warn: topLevel 'contents' permission set to 'write': .github/workflows/backport-automerge.yaml:41","Info: topLevel 'contents' permission set to 'read': .github/workflows/backport-labeled-prs.yaml:41","Info: topLevel 'issues' permission set to 'read': .github/workflows/backport-labeled-prs.yaml:42","Warn: no topLevel permission defined: .github/workflows/claude.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/data-access-request-e2e.yml:20","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/data-access-request-e2e.yml:21","Warn: topLevel 'checks' permission set to 'write': .github/workflows/data-access-request-e2e.yml:22","Info: topLevel 'contents' permission set to 'read': .github/workflows/docker-k8s-operator.yml:28","Info: topLevel 'contents' permission set to 'read': .github/workflows/docker-openmetadata-db.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/docker-openmetadata-ingestion-base-slim.yml:27","Info: topLevel 'contents' permission set to 'read': .github/workflows/docker-openmetadata-ingestion-base.yml:27","Info: topLevel 'contents' permission set to 'read': .github/workflows/docker-openmetadata-ingestion.yml:27","Info: topLevel 'contents' permission set to 'read': .github/workflows/docker-openmetadata-postgres.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/docker-openmetadata-server.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/git-create-release-branch.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/harness-integrity.yml:45","Warn: topLevel 'checks' permission set to 'write': .github/workflows/integration-tests-mysql-elasticsearch.yml:47","Info: topLevel 'contents' permission set to 'read': .github/workflows/integration-tests-mysql-elasticsearch.yml:46","Info: topLevel 'contents' permission set to 'read': .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:44","Warn: topLevel 'checks' permission set to 'write': .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:45","Info: topLevel 'contents' permission set to 'read': .github/workflows/integration-tests-postgres-opensearch.yml:46","Warn: topLevel 'checks' permission set to 'write': .github/workflows/integration-tests-postgres-opensearch.yml:47","Info: topLevel 'contents' permission set to 'read': .github/workflows/java-checkstyle.yml:29","Info: topLevel 'contents' permission set to 'read': .github/workflows/java-playwright-nightly.yml:80","Warn: topLevel 'checks' permission set to 'write': .github/workflows/java-playwright-nightly.yml:81","Info: topLevel 'contents' permission set to 'read': .github/workflows/label-connector.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/maven-build-collate.yml:55","Warn: topLevel 'checks' permission set to 'write': .github/workflows/maven-build-collate.yml:56","Info: topLevel 'contents' permission set to 'read': .github/workflows/maven-sonar-build.yml:31","Warn: topLevel 'checks' permission set to 'write': .github/workflows/maven-sonar-build.yml:32","Info: topLevel 'checks' permission set to 'read': .github/workflows/merge-queue-daily-report.yml:47","Info: topLevel 'actions' permission set to 'read': .github/workflows/merge-queue-daily-report.yml:48","Info: topLevel 'contents' permission set to 'read': .github/workflows/merge-queue-daily-report.yml:49","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/merge-queue-daily-report.yml:50","Info: topLevel 'checks' permission set to 'read': .github/workflows/merge-queue-dequeue-report.yml:33","Info: topLevel 'contents' permission set to 'read': .github/workflows/merge-queue-dequeue-report.yml:34","Info: topLevel 'contents' permission set to 'read': .github/workflows/merge-queue-health-alert.yml:54","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/merge-queue-health-alert.yml:55","Info: topLevel 'contents' permission set to 'read': .github/workflows/monitor-slack-link.yml:22","Info: topLevel 'actions' permission set to 'read': .github/workflows/mysql-nightly-e2e.yml:55","Info: topLevel 'contents' permission set to 'read': .github/workflows/mysql-nightly-e2e.yml:56","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/mysql-nightly-e2e.yml:57","Warn: topLevel 'checks' permission set to 'write': .github/workflows/openmetadata-service-unit-tests.yml:25","Info: topLevel 'contents' permission set to 'read': .github/workflows/openmetadata-service-unit-tests.yml:24","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/playwright-e2e-reusable.yml:152","Info: topLevel 'actions' permission set to 'read': .github/workflows/playwright-e2e-reusable.yml:150","Info: topLevel 'contents' permission set to 'read': .github/workflows/playwright-e2e-reusable.yml:151","Info: topLevel 'checks' permission set to 'read': .github/workflows/playwright-flaky-daily-report.yml:48","Info: topLevel 'contents' permission set to 'read': .github/workflows/playwright-flaky-daily-report.yml:49","Info: topLevel 'actions' permission set to 'read': .github/workflows/playwright-flaky-daily-report.yml:47","Warn: no topLevel permission defined: .github/workflows/playwright-impact-map-drift.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:46","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:79","Info: topLevel 'actions' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:77","Info: topLevel 'contents' permission set to 'read': .github/workflows/playwright-postgresql-e2e.yml:78","Info: topLevel 'actions' permission set to 'read': .github/workflows/playwright-postgresql-pr-comment.yml:22","Info: topLevel 'contents' permission set to 'read': .github/workflows/playwright-postgresql-pr-comment.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/playwright-search-nightly.yml:18","Info: topLevel 'contents' permission set to 'read': .github/workflows/playwright-sso-login-nightly.yml:118","Warn: no topLevel permission defined: .github/workflows/playwright-visual.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/populate-playwright-caches.yml:94","Info: topLevel 'actions' permission set to 'read': .github/workflows/postgresql-nightly-e2e.yml:56","Info: topLevel 'contents' permission set to 'read': .github/workflows/postgresql-nightly-e2e.yml:57","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/postgresql-nightly-e2e.yml:58","Info: topLevel 'contents' permission set to 'read': .github/workflows/pr-metadata-validation.yml:45","Info: topLevel 'issues' permission set to 'read': .github/workflows/pr-metadata-validation.yml:46","Warn: topLevel 'actions' permission set to 'write': .github/workflows/prune-ephemeral-caches.yml:51","Info: topLevel 'contents' permission set to 'read': .github/workflows/prune-ephemeral-caches.yml:52","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish-maven-package.yml:28","Info: topLevel 'contents' permission set to 'read': .github/workflows/py-checkstyle.yml:25","Info: topLevel 'contents' permission set to 'read': .github/workflows/py-cli-e2e-tests-v2.yml:33","Info: topLevel 'contents' permission set to 'read': .github/workflows/py-cli-e2e-tests.yml:32","Info: topLevel 'contents' permission set to 'read': .github/workflows/py-operator-build-test.yml:25","Info: topLevel 'contents' permission set to 'read': .github/workflows/py-sonarcloud-nightly.yml:20","Info: topLevel 'contents' permission set to 'read': .github/workflows/py-tests-postgres.yml:20","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/py-tests-postgres.yml:21","Warn: no topLevel permission defined: .github/workflows/py-tests-shared.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/py-tests.yml:20","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/py-tests.yml:21","Info: topLevel 'contents' permission set to 'read': .github/workflows/python-packages-publish.yml:18","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-branch-validate.yml:37","Warn: no topLevel permission defined: .github/workflows/security-scan.yml:1","Warn: no topLevel permission defined: .github/workflows/storybook-nightly.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/team-labeler.yml:5","Warn: no topLevel permission defined: .github/workflows/typescript-type-generation.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/ui-checkstyle.yml:36","Info: topLevel 'contents' permission set to 'read': .github/workflows/ui-sonarcloud-nightly.yml:20","Warn: no topLevel permission defined: .github/workflows/update-playwright-e2e-docs.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-docker-compose-quickstart.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/validate-jsons-yamls.yml:26","Info: topLevel 'contents' permission set to 'read': .github/workflows/yarn-coverage.yml:17"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#token-permissions","short":"Determines if the project's workflows follow the principle of least privilege."}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#binary-artifacts","short":"Determines if the project has generated executable (binary) artifacts in the source repository."}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-k8s-operator.yml:83"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#packaging","short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall."}},{"name":"SAST","score":10,"reason":"SAST tool detected","details":["Info: SAST configuration detected: Sonar","Warn: 21 commits out of 30 are checked with a SAST tool"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#sast","short":"Determines if the project uses static code analysis."}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#fuzzing","short":"Determines if the project uses fuzzing."}},{"name":"Branch-Protection","score":1,"reason":"branch protection is not maximal on development and all release branches","details":["Warn: branch protection not enabled for branch '2.0.0-rc2'","Warn: branch protection not enabled for branch '2.0.0-rc1'","Info: 'allow deletion' disabled on branch 'main'","Info: 'allow deletion' disabled on branch '2.0.5'","Info: 'allow deletion' disabled on branch '2.0.4'","Info: 'allow deletion' disabled on branch '2.0.3'","Info: 'allow deletion' disabled on branch '2.0.2'","Info: 'allow deletion' disabled on branch '1.13.6'","Info: 'allow deletion' disabled on branch '1.13.5'","Info: 'allow deletion' disabled on branch '2.0.1'","Info: 'allow deletion' disabled on branch '2.0.0'","Info: 'allow deletion' disabled on branch '1.13.4'","Info: 'allow deletion' disabled on branch '1.13.3'","Info: 'allow deletion' disabled on branch '1.13.2'","Warn: 'allow deletion' enabled on branch '1.12.14'","Info: 'allow deletion' disabled on branch '1.12.13'","Info: 'allow deletion' disabled on branch '1.13.1'","Info: 'allow deletion' disabled on branch '1.12.12'","Info: 'allow deletion' disabled on branch '1.12.11'","Info: 'allow deletion' disabled on branch '1.13.0'","Warn: 'allow deletion' enabled on branch '1.12.10'","Warn: 'allow deletion' enabled on branch '1.12.9'","Warn: 'allow deletion' enabled on branch '1.12.8'","Info: 'allow deletion' disabled on branch '1.12.7'","Warn: 'allow deletion' enabled on branch '1.13.0-rc1'","Warn: 'allow deletion' enabled on branch '1.12.6'","Warn: 'allow deletion' enabled on branch '1.12.5'","Warn: 'allow deletion' enabled on branch '1.12.4'","Info: 'allow deletion' disabled on branch '1.12.3'","Warn: 'allow deletion' enabled on branch '1.11.14'","Info: 'allow deletion' disabled on branch '1.11.13'","Info: 'force pushes' disabled on branch 'main'","Info: 'force pushes' disabled on branch '2.0.5'","Info: 'force pushes' disabled on branch '2.0.4'","Info: 'force pushes' disabled on branch '2.0.3'","Info: 'force pushes' disabled on branch '2.0.2'","Info: 'force pushes' disabled on branch '1.13.6'","Info: 'force pushes' disabled on branch '1.13.5'","Info: 'force pushes' disabled on branch '2.0.1'","Info: 'force pushes' disabled on branch '2.0.0'","Info: 'force pushes' disabled on branch '1.13.4'","Info: 'force pushes' disabled on branch '1.13.3'","Info: 'force pushes' disabled on branch '1.13.2'","Warn: 'force pushes' enabled on branch '1.12.14'","Info: 'force pushes' disabled on branch '1.12.13'","Info: 'force pushes' disabled on branch '1.13.1'","Info: 'force pushes' disabled on branch '1.12.12'","Info: 'force pushes' disabled on branch '1.12.11'","Info: 'force pushes' disabled on branch '1.13.0'","Warn: 'force pushes' enabled on branch '1.12.10'","Warn: 'force pushes' enabled on branch '1.12.9'","Warn: 'force pushes' enabled on branch '1.12.8'","Info: 'force pushes' disabled on branch '1.12.7'","Warn: 'force pushes' enabled on branch '1.13.0-rc1'","Warn: 'force pushes' enabled on branch '1.12.6'","Warn: 'force pushes' enabled on branch '1.12.5'","Warn: 'force pushes' enabled on branch '1.12.4'","Info: 'force pushes' disabled on branch '1.12.3'","Warn: 'force pushes' enabled on branch '1.11.14'","Info: 'force pushes' disabled on branch '1.11.13'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch '2.0.5'","Warn: 'branch protection settings apply to administrators' is disabled on branch '2.0.4'","Warn: 'branch protection settings apply to administrators' is disabled on branch '2.0.3'","Warn: 'branch protection settings apply to administrators' is disabled on branch '2.0.2'","Warn: 'branch protection settings apply to administrators' is disabled on branch '1.13.6'","Warn: 'branch protection settings apply to administrators' is disabled on branch '1.13.5'","Warn: 'branch protection settings apply to administrators' is disabled on branch '2.0.1'","Warn: 'branch protection settings apply to administrators' is disabled on branch '2.0.0'","Warn: 'branch protection settings apply to administrators' is disabled on branch '1.13.4'","Warn: 'branch protection settings apply to administrators' is disabled on branch '1.13.3'","Warn: 'branch protection settings apply to administrators' is disabled on branch '1.13.2'","Warn: 'branch protection settings apply to administrators' is disabled on branch '1.13.1'","Warn: 'branch protection settings apply to administrators' is disabled on branch '1.13.0'","Warn: 'stale review dismissal' is disabled on branch 'main'","Warn: 'stale review dismissal' is disabled on branch '2.0.5'","Warn: 'stale review dismissal' is disabled on branch '2.0.4'","Warn: 'stale review dismissal' is disabled on branch '2.0.3'","Warn: 'stale review dismissal' is disabled on branch '2.0.2'","Warn: 'stale review dismissal' is disabled on branch '1.13.6'","Warn: 'stale review dismissal' is disabled on branch '1.13.5'","Warn: 'stale review dismissal' is disabled on branch '2.0.1'","Warn: 'stale review dismissal' is disabled on branch '2.0.0'","Warn: 'stale review dismissal' is disabled on branch '1.13.4'","Warn: 'stale review dismissal' is disabled on branch '1.13.3'","Warn: 'stale review dismissal' is disabled on branch '1.13.2'","Warn: 'stale review dismissal' is disabled on branch '1.13.1'","Warn: 'stale review dismissal' is disabled on branch '1.13.0'","Warn: required approving review count is 1 on branch 'main'","Warn: required approving review count is 1 on branch '2.0.5'","Warn: required approving review count is 1 on branch '2.0.4'","Warn: required approving review count is 1 on branch '2.0.3'","Warn: required approving review count is 1 on branch '2.0.2'","Warn: branch '1.13.6' does not require approvers","Warn: branch '1.13.5' does not require approvers","Warn: required approving review count is 1 on branch '2.0.1'","Warn: required approving review count is 1 on branch '2.0.0'","Warn: branch '1.13.4' does not require approvers","Warn: branch '1.13.3' does not require approvers","Warn: branch '1.13.2' does not require approvers","Warn: branch '1.12.14' does not require approvers","Warn: branch '1.12.13' does not require approvers","Warn: branch '1.13.1' does not require approvers","Warn: branch '1.12.12' does not require approvers","Warn: branch '1.12.11' does not require approvers","Warn: branch '1.13.0' does not require approvers","Warn: branch '1.12.10' does not require approvers","Warn: branch '1.12.9' does not require approvers","Warn: branch '1.12.8' does not require approvers","Warn: branch '1.12.7' does not require approvers","Warn: branch '1.13.0-rc1' does not require approvers","Warn: branch '1.12.6' does not require approvers","Warn: branch '1.12.5' does not require approvers","Warn: branch '1.12.4' does not require approvers","Warn: branch '1.12.3' does not require approvers","Warn: branch '1.11.14' does not require approvers","Warn: branch '1.11.13' does not require approvers","Info: codeowner review is required on branch 'main'","Warn: codeowners review is not required on branch '2.0.5'","Warn: codeowners review is not required on branch '2.0.4'","Warn: codeowners review is not required on branch '2.0.3'","Warn: codeowners review is not required on branch '2.0.2'","Warn: codeowners review is not required on branch '1.13.6'","Warn: codeowners review is not required on branch '1.13.5'","Warn: codeowners review is not required on branch '2.0.1'","Warn: codeowners review is not required on branch '2.0.0'","Warn: codeowners review is not required on branch '1.13.4'","Warn: codeowners review is not required on branch '1.13.3'","Warn: codeowners review is not required on branch '1.13.2'","Warn: codeowners review is not required on branch '1.12.14'","Warn: codeowners review is not required on branch '1.12.13'","Warn: codeowners review is not required on branch '1.13.1'","Warn: codeowners review is not required on branch '1.12.12'","Warn: codeowners review is not required on branch '1.12.11'","Warn: codeowners review is not required on branch '1.13.0'","Warn: codeowners review is not required on branch '1.12.10'","Warn: codeowners review is not required on branch '1.12.9'","Warn: codeowners review is not required on branch '1.12.8'","Warn: codeowners review is not required on branch '1.12.7'","Warn: codeowners review is not required on branch '1.13.0-rc1'","Warn: codeowners review is not required on branch '1.12.6'","Warn: codeowners review is not required on branch '1.12.5'","Warn: codeowners review is not required on branch '1.12.4'","Warn: codeowners review is not required on branch '1.12.3'","Warn: codeowners review is not required on branch '1.11.14'","Warn: codeowners review is not required on branch '1.11.13'","Warn: 'last push approval' is disabled on branch 'main'","Warn: 'last push approval' is disabled on branch '2.0.5'","Warn: 'last push approval' is disabled on branch '2.0.4'","Warn: 'last push approval' is disabled on branch '2.0.3'","Warn: 'last push approval' is disabled on branch '2.0.2'","Warn: 'last push approval' is disabled on branch '1.13.6'","Warn: 'last push approval' is disabled on branch '1.13.5'","Warn: 'last push approval' is disabled on branch '2.0.1'","Warn: 'last push approval' is disabled on branch '2.0.0'","Warn: 'last push approval' is disabled on branch '1.13.4'","Warn: 'last push approval' is disabled on branch '1.13.3'","Warn: 'last push approval' is disabled on branch '1.13.2'","Warn: 'last push approval' is disabled on branch '1.13.1'","Warn: 'last push approval' is disabled on branch '1.13.0'","Warn: 'up-to-date branches' is disabled on branch 'main'","Warn: 'up-to-date branches' is disabled on branch '2.0.5'","Warn: 'up-to-date branches' is disabled on branch '2.0.4'","Warn: 'up-to-date branches' is disabled on branch '2.0.3'","Warn: 'up-to-date branches' is disabled on branch '2.0.2'","Warn: 'up-to-date branches' is disabled on branch '1.13.6'","Warn: 'up-to-date branches' is disabled on branch '1.13.5'","Warn: 'up-to-date branches' is disabled on branch '2.0.1'","Warn: 'up-to-date branches' is disabled on branch '2.0.0'","Warn: 'up-to-date branches' is disabled on branch '1.13.4'","Warn: 'up-to-date branches' is disabled on branch '1.13.3'","Warn: 'up-to-date branches' is disabled on branch '1.13.2'","Warn: 'up-to-date branches' is disabled on branch '1.13.1'","Warn: 'up-to-date branches' is disabled on branch '1.13.0'","Info: status check found to merge onto on branch 'main'","Info: status check found to merge onto on branch '2.0.5'","Info: status check found to merge onto on branch '2.0.4'","Info: status check found to merge onto on branch '2.0.3'","Info: status check found to merge onto on branch '2.0.2'","Info: status check found to merge onto on branch '1.13.6'","Info: status check found to merge onto on branch '1.13.5'","Info: status check found to merge onto on branch '2.0.1'","Info: status check found to merge onto on branch '2.0.0'","Info: status check found to merge onto on branch '1.13.4'","Info: status check found to merge onto on branch '1.13.3'","Info: status check found to merge onto on branch '1.13.2'","Warn: no status checks found to merge onto branch '1.12.14'","Warn: no status checks found to merge onto branch '1.12.13'","Info: status check found to merge onto on branch '1.13.1'","Warn: no status checks found to merge onto branch '1.12.12'","Warn: no status checks found to merge onto branch '1.12.11'","Info: status check found to merge onto on branch '1.13.0'","Warn: no status checks found to merge onto branch '1.12.10'","Warn: no status checks found to merge onto branch '1.12.9'","Warn: no status checks found to merge onto branch '1.12.8'","Warn: no status checks found to merge onto branch '1.12.7'","Warn: no status checks found to merge onto branch '1.13.0-rc1'","Warn: no status checks found to merge onto branch '1.12.6'","Warn: no status checks found to merge onto branch '1.12.5'","Warn: no status checks found to merge onto branch '1.12.4'","Warn: no status checks found to merge onto branch '1.12.3'","Warn: no status checks found to merge onto branch '1.11.14'","Warn: no status checks found to merge onto branch '1.11.13'","Info: PRs are required in order to make changes on branch 'main'","Info: PRs are required in order to make changes on branch '2.0.5'","Info: PRs are required in order to make changes on branch '2.0.4'","Info: PRs are required in order to make changes on branch '2.0.3'","Info: PRs are required in order to make changes on branch '2.0.2'","Info: PRs are required in order to make changes on branch '1.13.6'","Info: PRs are required in order to make changes on branch '1.13.5'","Info: PRs are required in order to make changes on branch '2.0.1'","Info: PRs are required in order to make changes on branch '2.0.0'","Info: PRs are required in order to make changes on branch '1.13.4'","Info: PRs are required in order to make changes on branch '1.13.3'","Info: PRs are required in order to make changes on branch '1.13.2'","Info: PRs are required in order to make changes on branch '1.13.1'","Info: PRs are required in order to make changes on branch '1.13.0'"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#branch-protection","short":"Determines if the default and release branches are protected with GitHub's branch protection settings."}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Info: Possibly incomplete results: error parsing shell code: a command can only contain words and redirects; encountered `(`: examples/python-sdk/data-quality/start:56","Warn: third-party GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/airflow-apis-tests.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/airflow-apis-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-revert-release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/auto-revert-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/claude.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/claude.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/claude.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/claude.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/codeql.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/data-access-request-e2e.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/data-access-request-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/data-access-request-e2e.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/data-access-request-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/data-access-request-e2e.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/data-access-request-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-k8s-operator.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-k8s-operator.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-db.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-db.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-db.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-db.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion-base-slim.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion-base-slim.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion-base-slim.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion-base-slim.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion-base.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion-base.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion-base.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion-base.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion-base.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion-base.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-ingestion.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-ingestion.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-postgres.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-postgres.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-postgres.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-postgres.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-server.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-server.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-server.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-server.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-server.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-server.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-server.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-server.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-server.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-server.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-openmetadata-server.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/docker-openmetadata-server.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/git-create-release-branch.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/git-create-release-branch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/git-create-release-branch.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/git-create-release-branch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/harness-integrity.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/harness-integrity.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/harness-integrity.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/harness-integrity.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:176: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:232: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:291: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:426: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:439: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-mysql-elasticsearch.yml:457: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-mysql-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:172: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:187: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:212: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:223: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:235: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:286: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:421: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:434: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:452: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-elasticsearch-redis.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-elasticsearch-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:176: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:232: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:253: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:388: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:401: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/integration-tests-postgres-opensearch.yml:419: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/integration-tests-postgres-opensearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-checkstyle.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-checkstyle.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-checkstyle.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-checkstyle.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-checkstyle.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-checkstyle.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-checkstyle.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-checkstyle.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:176: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:286: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:295: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:314: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:327: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:351: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:362: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:365: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:371: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:408: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:417: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/java-playwright-nightly.yml:427: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/java-playwright-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/label-connector.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/label-connector.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/label-connector.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/label-connector.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-build-collate.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-build-collate.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/maven-build-collate.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-build-collate.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/maven-build-collate.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-build-collate.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/maven-build-collate.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-build-collate.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-build-collate.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-build-collate.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/maven-sonar-build.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-sonar-build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/maven-sonar-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-sonar-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-sonar-build.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-sonar-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-sonar-build.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-sonar-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-sonar-build.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/maven-sonar-build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/merge-queue-daily-report.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/merge-queue-daily-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/merge-queue-health-alert.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/merge-queue-health-alert.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/monitor-slack-link.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/monitor-slack-link.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/monitor-slack-link.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/monitor-slack-link.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:176: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:190: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:203: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:244: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:249: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/openmetadata-service-unit-tests.yml:257: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/openmetadata-service-unit-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:2028: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:2034: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:2050: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:2072: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:334: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:343: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:363: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:386: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:394: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:453: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:488: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:502: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:573: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:587: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:593: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:614: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:646: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:668: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:774: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:875: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1016: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1037: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1056: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1064: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1091: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1109: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1226: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1276: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1290: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1297: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1306: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:525: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:558: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:889: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:911: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:934: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:957: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:966: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1364: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1379: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1386: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1394: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1401: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1454: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1470: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1495: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1506: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1871: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1883: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1894: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1928: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:1955: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-e2e-reusable.yml:2001: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-e2e-reusable.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-flaky-daily-report.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-flaky-daily-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-flaky-daily-report.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-flaky-daily-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-impact-map-drift.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-impact-map-drift.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-impact-map-drift.yml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-impact-map-drift.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/playwright-impact-map-drift.yml:253: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-impact-map-drift.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:206: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:219: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:283: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:307: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:318: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:328: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:363: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:429: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/playwright-knowledge-graph-postgresql-e2e.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-knowledge-graph-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:253: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:261: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:289: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:350: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:364: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:454: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:576: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:614: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:635: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:674: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:732: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:739: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:830: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:897: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-e2e.yml:903: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-e2e.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-pr-comment.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-pr-comment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-pr-comment.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-pr-comment.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-postgresql-pr-comment.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-postgresql-pr-comment.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/playwright-search-nightly.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-search-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-search-nightly.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-search-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-search-nightly.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-search-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-search-nightly.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-search-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-search-nightly.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-search-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/playwright-sso-login-nightly.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-sso-login-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-sso-login-nightly.yml:296: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-sso-login-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-sso-login-nightly.yml:300: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-sso-login-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-sso-login-nightly.yml:313: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-sso-login-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-sso-login-nightly.yml:349: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-sso-login-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-sso-login-nightly.yml:446: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-sso-login-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-sso-login-nightly.yml:472: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-sso-login-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-visual.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-visual.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-visual.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-visual.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-visual.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-visual.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/playwright-visual.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/playwright-visual.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/populate-playwright-caches.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/populate-playwright-caches.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/populate-playwright-caches.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/populate-playwright-caches.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/populate-playwright-caches.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/populate-playwright-caches.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/populate-playwright-caches.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/populate-playwright-caches.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/populate-playwright-caches.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/populate-playwright-caches.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/populate-playwright-caches.yml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/populate-playwright-caches.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/populate-playwright-caches.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/populate-playwright-caches.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/populate-playwright-caches.yml:267: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/populate-playwright-caches.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-maven-package.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/publish-maven-package.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-maven-package.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/publish-maven-package.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-maven-package.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/publish-maven-package.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:385: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:388: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:404: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:425: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:239: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:248: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:288: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-cli-e2e-tests.yml:327: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-cli-e2e-tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-operator-build-test.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-operator-build-test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-operator-build-test.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-operator-build-test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-operator-build-test.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-operator-build-test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-operator-build-test.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-operator-build-test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:207: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:223: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/py-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python-packages-publish.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/python-packages-publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python-packages-publish.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/python-packages-publish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-branch-validate.yml:190: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/release-branch-validate.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-branch-validate.yml:231: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/release-branch-validate.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-branch-validate.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/release-branch-validate.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-branch-validate.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/release-branch-validate.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-branch-validate.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/release-branch-validate.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-branch-validate.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/release-branch-validate.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-branch-validate.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/release-branch-validate.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-branch-validate.yml:164: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/release-branch-validate.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/security-scan.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:191: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:272: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:296: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security-scan.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/security-scan.yml:392: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/security-scan.yml:449: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/security-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/storybook-nightly.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/storybook-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/storybook-nightly.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/storybook-nightly.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/team-labeler.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/team-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/team-labeler.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/team-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/team-labeler.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/team-labeler.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/typescript-type-generation.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/typescript-type-generation.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/typescript-type-generation.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/typescript-type-generation.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/typescript-type-generation.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/typescript-type-generation.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/typescript-type-generation.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/typescript-type-generation.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/typescript-type-generation.yml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/typescript-type-generation.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/typescript-type-generation.yml:212: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/typescript-type-generation.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:629: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:639: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ui-checkstyle.yml:152: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-checkstyle.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ui-sonarcloud-nightly.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ui-sonarcloud-nightly.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ui-sonarcloud-nightly.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ui-sonarcloud-nightly.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/ui-sonarcloud-nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-playwright-e2e-docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/update-playwright-e2e-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-playwright-e2e-docs.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/update-playwright-e2e-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-docker-compose-quickstart.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/validate-docker-compose-quickstart.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-jsons-yamls.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/validate-jsons-yamls.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-jsons-yamls.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/validate-jsons-yamls.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-jsons-yamls.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/validate-jsons-yamls.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-jsons-yamls.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/validate-jsons-yamls.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/yarn-coverage.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/open-metadata/OpenMetadata/yarn-coverage.yml/main?enable=pin","Warn: containerImage not pinned by hash: .devcontainer/dev/Dockerfile:12: pin your Docker image by updating mcr.microsoft.com/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/devcontainers/base:ubuntu-22.04@sha256:81380e4c9c14e8a629ff39029639e4b7893e67400246fa7782a0fe7dc193a02a","Warn: containerImage not pinned by hash: docker/development/Dockerfile:16: pin your Docker image by updating alpine:3 to alpine:3@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6","Warn: containerImage not pinned by hash: docker/development/Dockerfile:30: pin your Docker image by updating eclipse-temurin:21-jdk to eclipse-temurin:21-jdk@sha256:3e3c176ffed168beb42c607be9bc1639b466cf00261a0fb04425562c9d0c5c2b","Warn: containerImage not pinned by hash: docker/development/Dockerfile:45: pin your Docker image by updating gcr.io/distroless/cc-debian13:debug-nonroot to gcr.io/distroless/cc-debian13:debug-nonroot@sha256:984d31d4bd6e71bb9469353d93e73c68f7b3c17142b2aec45f2a960489095b22","Warn: containerImage not pinned by hash: docker/development/mock-oidc-provider/Dockerfile:1: pin your Docker image by updating node:20-alpine to node:20-alpine@sha256:fb4cd12c85ee03686f6af5362a0b0d56d50c58a04632e6c0fb8363f609372293","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile:14: pin your Docker image by updating alpine:3 to alpine:3@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile:51: pin your Docker image by updating eclipse-temurin:21-jdk to eclipse-temurin:21-jdk@sha256:3e3c176ffed168beb42c607be9bc1639b466cf00261a0fb04425562c9d0c5c2b","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile:83: pin your Docker image by updating gcr.io/distroless/cc-debian13:debug-nonroot to gcr.io/distroless/cc-debian13:debug-nonroot@sha256:984d31d4bd6e71bb9469353d93e73c68f7b3c17142b2aec45f2a960489095b22","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile.fuseki-alpine:2: pin your Docker image by updating eclipse-temurin:21-jre to eclipse-temurin:21-jre@sha256:cff19e6215689161eb6162c11b86b0c60ddf802164f2eaf48d570f8fb79a36c5","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile.fuseki-arm64:2: pin your Docker image by updating eclipse-temurin:21-jre-jammy to eclipse-temurin:21-jre-jammy@sha256:f04fb34e053148344e83317976114ec3f37e4b830ec8bdab5a2fe3cecd7d010b","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile.fuseki-multiarch:3: pin your Docker image by updating eclipse-temurin:21-jre-jammy to eclipse-temurin:21-jre-jammy@sha256:f04fb34e053148344e83317976114ec3f37e4b830ec8bdab5a2fe3cecd7d010b","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile.fuseki-simple:2: pin your Docker image by updating alpine:latest to alpine:latest@sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile.fuseki-simple:14: pin your Docker image by updating eclipse-temurin:21-jre-jammy to eclipse-temurin:21-jre-jammy@sha256:f04fb34e053148344e83317976114ec3f37e4b830ec8bdab5a2fe3cecd7d010b","Warn: containerImage not pinned by hash: docker/docker-compose-quickstart/Dockerfile.fuseki-working:3: pin your Docker image by updating eclipse-temurin:21-jre-jammy to eclipse-temurin:21-jre-jammy@sha256:f04fb34e053148344e83317976114ec3f37e4b830ec8bdab5a2fe3cecd7d010b","Warn: containerImage not pinned by hash: docker/images/minimal-ubuntu/Dockerfile:15: pin your Docker image by updating ubuntu:xenial-20210416 to ubuntu:xenial-20210416@sha256:eed7e1076bbc1f342c4474c718e5438af4784f59a4e88ad687dbb98483b59ee4","Warn: containerImage not pinned by hash: docker/mysql/Dockerfile_mysql:1: pin your Docker image by updating mysql:8.0 to mysql:8.0@sha256:7dcddc01f13bab2f15cde676d44d01f61fc9f99fe7785e86196dfc07d358ae2b","Warn: containerImage not pinned by hash: docker/postgresql/Dockerfile_postgres:1: pin your Docker image by updating postgres:15 to postgres:15@sha256:c961aa287d8698297cb26cdfadfbe9fd2cbaf77e53cfffe9636e8d8a1e4d842c","Warn: containerImage not pinned by hash: docker/rdf-store/Dockerfile:2: pin your Docker image by updating eclipse-temurin:21-jre-jammy to eclipse-temurin:21-jre-jammy@sha256:f04fb34e053148344e83317976114ec3f37e4b830ec8bdab5a2fe3cecd7d010b","Warn: containerImage not pinned by hash: docker/rdf-store/Dockerfile:93: pin your Docker image by updating eclipse-temurin:21-jdk-jammy to eclipse-temurin:21-jdk-jammy@sha256:e0c60c487345d1dc9d0fc7b6f0496f3cc941e5132e09296cc17a6decc71b902b","Warn: containerImage not pinned by hash: docker/rdf-store/Dockerfile:102","Warn: containerImage not pinned by hash: docker/storybook/Dockerfile:16: pin your Docker image by updating node:22.17-alpine to node:22.17-alpine@sha256:5539840ce9d013fa13e3b9814c9353024be7ac75aca5db6d039504a56c04ea59","Warn: containerImage not pinned by hash: docker/storybook/Dockerfile:34: pin your Docker image by updating node:22.17-alpine to node:22.17-alpine@sha256:5539840ce9d013fa13e3b9814c9353024be7ac75aca5db6d039504a56c04ea59","Warn: containerImage not pinned by hash: ingestion/Dockerfile:1: pin your Docker image by updating mysql:8.3 to mysql:8.3@sha256:9de9d54fecee6253130e65154b930978b1fcc336bcc86dfd06e89b72a2588ebe","Warn: containerImage not pinned by hash: ingestion/Dockerfile:3: pin your Docker image by updating apache/airflow:3.3.2-python3.12 to apache/airflow:3.3.2-python3.12@sha256:9df9c8be4096b9cc626bd7cb1f2b8c712eef66c59c615f8c7e6200871ca10bd1","Warn: containerImage not pinned by hash: ingestion/Dockerfile.ci:1: pin your Docker image by updating mysql:8.3 to mysql:8.3@sha256:9de9d54fecee6253130e65154b930978b1fcc336bcc86dfd06e89b72a2588ebe","Warn: containerImage not pinned by hash: ingestion/Dockerfile.ci:3: pin your Docker image by updating apache/airflow:3.3.2-python3.12 to apache/airflow:3.3.2-python3.12@sha256:9df9c8be4096b9cc626bd7cb1f2b8c712eef66c59c615f8c7e6200871ca10bd1","Warn: containerImage not pinned by hash: ingestion/operators/docker/Dockerfile:1: pin your Docker image by updating python:3.12-slim-trixie to python:3.12-slim-trixie@sha256:a6e34c598f2467ed0e9a8d349809fcd8b5c603269512df273a0bb1784edc11b1","Warn: containerImage not pinned by hash: ingestion/operators/docker/Dockerfile.ci:1: pin your Docker image by updating python:3.12-slim-trixie to python:3.12-slim-trixie@sha256:a6e34c598f2467ed0e9a8d349809fcd8b5c603269512df273a0bb1784edc11b1","Warn: containerImage not pinned by hash: ingestion/tests/integration/airflow/Dockerfile:15: pin your Docker image by updating apache/airflow:3.3.1-python3.10 to apache/airflow:3.3.1-python3.10@sha256:26c73230367b57b118f59897db3f24fc56733b029ee2993cdba5365c33f77556","Warn: containerImage not pinned by hash: ingestion/tests/integration/trino/trino/Dockerfile:2","Warn: containerImage not pinned by hash: openmetadata-k8s-operator/Dockerfile:1: pin your Docker image by updating eclipse-temurin:21-jre-alpine to eclipse-temurin:21-jre-alpine@sha256:51ab5e3302e7141ce665ca3ea85e8b5cd648eafbc3c0c90dd79d6537684e4555","Warn: npmCommand not pinned by hash: docker/development/mock-oidc-provider/Dockerfile:6","Warn: pipCommand not pinned by hash: docker/images/minimal-ubuntu/Dockerfile:40-41","Warn: npmCommand not pinned by hash: docker/olivaw/Dockerfile:74-91","Warn: npmCommand not pinned by hash: docker/storybook/Dockerfile:38","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:117","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:129","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:130","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:131","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:135-137","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:143","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:146","Warn: pipCommand not pinned by hash: ingestion/Dockerfile:153","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:117","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:127","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:130","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:134","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:140","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:144-147","Warn: downloadThenRun not pinned by hash: ingestion/Dockerfile.ci:148-155","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:159","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:162-164","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:167","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:176","Warn: pipCommand not pinned by hash: ingestion/Dockerfile.ci:184","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile:145","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile:164","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile:165","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile:169-171","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile:177","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:146","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:166","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:170-173","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:174","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:175","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:178-180","Warn: pipCommand not pinned by hash: ingestion/operators/docker/Dockerfile.ci:189","Warn: pipCommand not pinned by hash: ingestion/tests/integration/airflow/Dockerfile:23-25","Warn: pipCommand not pinned by hash: .devcontainer/dev/post-create.sh:80","Warn: downloadThenRun not pinned by hash: scripts/reindex-perf-bootstrap.sh:88","Warn: pipCommand not pinned by hash: .github/workflows/monitor-slack-link.yml:47","Warn: pipCommand not pinned by hash: .github/workflows/py-sonarcloud-nightly.yml:167","Warn: pipCommand not pinned by hash: .github/workflows/py-tests-shared.yml:606","Warn: npmCommand not pinned by hash: .github/workflows/security-scan.yml:207","Warn: npmCommand not pinned by hash: .github/workflows/ui-sonarcloud-nightly.yml:86","Warn: pipCommand not pinned by hash: .github/workflows/validate-jsons-yamls.yml:72","Warn: pipCommand not pinned by hash: .github/workflows/validate-jsons-yamls.yml:80","Warn: npmCommand not pinned by hash: .github/workflows/yarn-coverage.yml:154","Info:  30 out of 294 GitHub-owned GitHubAction dependencies pinned","Info:  35 out of 132 third-party GitHubAction dependencies pinned","Info:   3 out of  34 containerImage dependencies pinned","Info:   0 out of   6 npmCommand dependencies pinned","Info:   0 out of  39 pipCommand dependencies pinned","Info:   0 out of   2 downloadThenRun dependencies pinned"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/61e84743356275f6ffca23b1b2f2cb945e19eb96/docs/checks.md#pinned-dependencies","short":"Determines if the project has declared and pinned the dependencies of its build process."}}]}