{"date":"2026-08-17","repo":{"name":"github.com/prestodb/presto","commit":"11f4e9a4fe55d01b0d1b76ddab12260a1c1746f5"},"scorecard":{"version":"v5.5.1-0.20260815060127-d1fab88f5463","commit":"d1fab88f54636ff366076edfc5c239f97b3c8e66"},"score":5,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/codenotify.yml:17"],"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#license"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/arrow-flight-tests.yml:26","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/arrow-flight-tests.yml:113","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codenotify.yml:14","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docs.yml:26","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/hive-tests.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/hive-tests.yml:39","Info: jobLevel 'contents' permission set to 'read': .github/workflows/hive-tests.yml:96","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/jdbc-connector-tests.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/jdbc-connector-tests.yml:39","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/kudu.yml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/kudu.yml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/maven-checks.yml:20","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/owasp-dependency-check.yml:17","Info: jobLevel 'contents' permission set to 'read': .github/workflows/owasp-dependency-check.yml:35","Info: jobLevel 'contents' permission set to 'read': .github/workflows/owasp-nvd-cache.yml:14","Info: jobLevel 'contents' permission set to 'read': .github/workflows/presto-release-publish.yml:503","Info: jobLevel 'contents' permission set to 'read': .github/workflows/presto-release-publish.yml:561","Info: jobLevel 'contents' permission set to 'read': .github/workflows/presto-release-publish.yml:662","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/presto-release-publish.yml:708","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/presto-release-publish.yml:78","Info: jobLevel 'contents' permission set to 'read': .github/workflows/presto-release-publish.yml:133","Info: jobLevel 'contents' permission set to 'read': .github/workflows/presto-release-publish.yml:275","Info: jobLevel 'contents' permission set to 'read': .github/workflows/presto-release-publish.yml:385","Info: jobLevel 'contents' permission set to 'read': .github/workflows/presto-release-publish.yml:311","Info: jobLevel 'contents' permission set to 'read': .github/workflows/presto-release-publish.yml:422","Info: jobLevel 'contents' permission set to 'read': .github/workflows/prestocpp-format-and-header-check.yml:17","Info: jobLevel 'contents' permission set to 'read': .github/workflows/prestocpp-linux-adapters-build.yml:21","Info: jobLevel 'contents' permission set to 'read': .github/workflows/prestocpp-linux-build-and-unit-test.yml:622","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/prestocpp-linux-build-and-unit-test.yml:19","Info: jobLevel 'contents' permission set to 'read': .github/workflows/prestocpp-linux-build-and-unit-test.yml:45","Info: jobLevel 'contents' permission set to 'read': .github/workflows/prestocpp-linux-build-and-unit-test.yml:140","Info: jobLevel 'contents' permission set to 'read': .github/workflows/prestocpp-linux-build-and-unit-test.yml:265","Info: jobLevel 'contents' permission set to 'read': .github/workflows/prestocpp-linux-build-and-unit-test.yml:394","Info: jobLevel 'contents' permission set to 'read': .github/workflows/prestocpp-linux-build-and-unit-test.yml:510","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/prestocpp-linux-build.yml:15","Info: jobLevel 'contents' permission set to 'read': .github/workflows/prestocpp-linux-build.yml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/prestocpp-macos-build.yml:39","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/prestocpp-macos-build.yml:17","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/product-tests-basic-environment.yml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/product-tests-basic-environment.yml:42","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/product-tests-specific-environment.yml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/product-tests-specific-environment.yml:42","Info: jobLevel 'contents' permission set to 'read': .github/workflows/product-tests-specific-environment.yml:109","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release-notes-check.yml:14","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/singlestore-tests.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/singlestore-tests.yml:43","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/spark-integration.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/spark-integration.yml:43","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/test-other-modules.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/test-other-modules.yml:43","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/tests.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/tests.yml:42","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/web-ui-checks.yml:20","Info: jobLevel 'contents' permission set to 'read': .github/workflows/web-ui-checks.yml:36","Info: topLevel 'contents' permission set to 'read': .github/workflows/arrow-flight-tests.yml:6","Warn: no topLevel permission defined: .github/workflows/codenotify.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/conventional-commit-check.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/dependency-review.yml:5","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/hive-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/jdbc-connector-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/kudu.yml:1","Warn: no topLevel permission defined: .github/workflows/maven-checks.yml:1","Warn: no topLevel permission defined: .github/workflows/owasp-dependency-check.yml:1","Warn: no topLevel permission defined: .github/workflows/owasp-nvd-cache.yml:1","Warn: no topLevel permission defined: .github/workflows/presto-release-prepare.yml:1","Warn: no topLevel permission defined: .github/workflows/presto-release-publish.yml:1","Warn: no topLevel permission defined: .github/workflows/prestocpp-format-and-header-check.yml:1","Warn: no topLevel permission defined: .github/workflows/prestocpp-linux-adapters-build.yml:1","Warn: no topLevel permission defined: .github/workflows/prestocpp-linux-build-and-unit-test.yml:1","Warn: no topLevel permission defined: .github/workflows/prestocpp-linux-build.yml:1","Warn: no topLevel permission defined: .github/workflows/prestocpp-macos-build.yml:1","Warn: no topLevel permission defined: .github/workflows/product-tests-basic-environment.yml:1","Warn: no topLevel permission defined: .github/workflows/product-tests-specific-environment.yml:1","Warn: no topLevel permission defined: .github/workflows/release-notes-check.yml:1","Warn: no topLevel permission defined: .github/workflows/singlestore-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/spark-integration.yml:1","Warn: no topLevel permission defined: .github/workflows/test-other-modules.yml:1","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Warn: no topLevel permission defined: .github/workflows/web-ui-checks.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#token-permissions"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 0.298.1 not signed: https://api.github.com/repos/prestodb/presto/releases/340918019","Warn: release artifact 0.298 not signed: https://api.github.com/repos/prestodb/presto/releases/338751654","Warn: release artifact 0.297 not signed: https://api.github.com/repos/prestodb/presto/releases/308614559","Warn: release artifact 0.296 not signed: https://api.github.com/repos/prestodb/presto/releases/268439358","Warn: release artifact 0.295 not signed: https://api.github.com/repos/prestodb/presto/releases/254598613","Warn: release artifact 0.298.1 does not have provenance: https://api.github.com/repos/prestodb/presto/releases/340918019","Warn: release artifact 0.298 does not have provenance: https://api.github.com/repos/prestodb/presto/releases/338751654","Warn: release artifact 0.297 does not have provenance: https://api.github.com/repos/prestodb/presto/releases/308614559","Warn: release artifact 0.296 does not have provenance: https://api.github.com/repos/prestodb/presto/releases/268439358","Warn: release artifact 0.295 does not have provenance: https://api.github.com/repos/prestodb/presto/releases/254598613"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":8,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: status check found to merge onto on branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#security-policy"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/presto-release-publish.yml:543"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: .mvn/wrapper/maven-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 2 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":5,"reason":"dependency not pinned by hash detected -- score normalized to 5","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arrow-flight-tests.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/arrow-flight-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arrow-flight-tests.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/arrow-flight-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arrow-flight-tests.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/arrow-flight-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arrow-flight-tests.yml:212: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/arrow-flight-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arrow-flight-tests.yml:219: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/arrow-flight-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arrow-flight-tests.yml:264: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/arrow-flight-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arrow-flight-tests.yml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/arrow-flight-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arrow-flight-tests.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/arrow-flight-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arrow-flight-tests.yml:299: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/arrow-flight-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codenotify.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/codenotify.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codenotify.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/codenotify.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependency-review.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/dependency-review.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependency-review.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/dependency-review.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/docs.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hive-tests.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/hive-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hive-tests.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/hive-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hive-tests.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/hive-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/hive-tests.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/hive-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jdbc-connector-tests.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/jdbc-connector-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jdbc-connector-tests.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/jdbc-connector-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/kudu.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/kudu.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/kudu.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/kudu.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-checks.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/maven-checks.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-checks.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/maven-checks.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/owasp-dependency-check.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/owasp-dependency-check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/owasp-dependency-check.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/owasp-dependency-check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/owasp-dependency-check.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/owasp-dependency-check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/owasp-dependency-check.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/owasp-dependency-check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/owasp-dependency-check.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/owasp-dependency-check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/owasp-nvd-cache.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/owasp-nvd-cache.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/owasp-nvd-cache.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/owasp-nvd-cache.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/owasp-nvd-cache.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/owasp-nvd-cache.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/owasp-nvd-cache.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/owasp-nvd-cache.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-prepare.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-prepare.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-prepare.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-prepare.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-prepare.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-prepare.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-prepare.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-prepare.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:278: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:398: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:506: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:513: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:665: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:672: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:713: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:724: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:733: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:750: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:164: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:255: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:314: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:320: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:333: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:436: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:443: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:577: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/presto-release-publish.yml:584: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/presto-release-publish.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-format-and-header-check.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-format-and-header-check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-adapters-build.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-adapters-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:624: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:656: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:674: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:267: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:300: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:325: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:396: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:429: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:447: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:512: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:544: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build-and-unit-test.yml:562: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build-and-unit-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-linux-build.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-linux-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prestocpp-macos-build.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/prestocpp-macos-build.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/product-tests-basic-environment.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/product-tests-basic-environment.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/product-tests-basic-environment.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/product-tests-basic-environment.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/product-tests-specific-environment.yml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/product-tests-specific-environment.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/product-tests-specific-environment.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/product-tests-specific-environment.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/product-tests-specific-environment.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/product-tests-specific-environment.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/product-tests-specific-environment.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/product-tests-specific-environment.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-notes-check.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/release-notes-check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-notes-check.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/release-notes-check.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/singlestore-tests.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/singlestore-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/singlestore-tests.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/singlestore-tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/spark-integration.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/spark-integration.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/spark-integration.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/spark-integration.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-other-modules.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/test-other-modules.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-other-modules.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/test-other-modules.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/web-ui-checks.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/prestodb/presto/web-ui-checks.yml/master?enable=pin","Warn: containerImage not pinned by hash: .devcontainer/Dockerfile:1: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:d78ab76437b1afc5f01e223d6bf0172763f404bb166441328845adbef44518cb","Warn: containerImage not pinned by hash: docker/Dockerfile:1: pin your Docker image by updating quay.io/centos/centos:stream9 to quay.io/centos/centos:stream9@sha256:64e5a212e4f2e7b706dbd822968914bb8def7de0a7fdfd3bf248241f8758101c","Warn: containerImage not pinned by hash: presto-native-execution/.devcontainer/Dockerfile:1","Warn: containerImage not pinned by hash: presto-native-execution/scripts/dockerfiles/centos-dependency.dockerfile:13: pin your Docker image by updating quay.io/centos/centos:stream9 to quay.io/centos/centos:stream9@sha256:64e5a212e4f2e7b706dbd822968914bb8def7de0a7fdfd3bf248241f8758101c","Warn: containerImage not pinned by hash: presto-native-execution/scripts/dockerfiles/prestissimo-runtime.dockerfile:15","Warn: containerImage not pinned by hash: presto-native-execution/scripts/dockerfiles/prestissimo-runtime.dockerfile:43: pin your Docker image by updating quay.io/centos/centos:stream9 to quay.io/centos/centos:stream9@sha256:64e5a212e4f2e7b706dbd822968914bb8def7de0a7fdfd3bf248241f8758101c","Warn: containerImage not pinned by hash: presto-native-execution/scripts/dockerfiles/ubuntu-22.04-dependency.dockerfile:14: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:2edbbc5dc405e9612ba3584ce95480277e3eb374407b5505fe26f17df77c7dbc","Warn: pipCommand not pinned by hash: presto-native-execution/.devcontainer/Dockerfile:19","Warn: pipCommand not pinned by hash: presto-docs/build:9","Warn: pipCommand not pinned by hash: presto-native-execution/scripts/setup-centos.sh:38","Info:   1 out of  99 GitHub-owned GitHubAction dependencies pinned","Info:  42 out of  42 third-party GitHubAction dependencies pinned","Info:   0 out of   7 containerImage dependencies pinned","Info:   0 out of   3 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/d1fab88f54636ff366076edfc5c239f97b3c8e66/docs/checks.md#pinned-dependencies"}}]}