{"id":21896762,"url":"https://github.com/rewardenv/reward","last_synced_at":"2026-04-02T23:32:56.165Z","repository":{"id":40261378,"uuid":"334221657","full_name":"rewardenv/reward","owner":"rewardenv","description":"Reward is a Swiss Army knife CLI utility for orchestrating Docker based development environments.","archived":false,"fork":false,"pushed_at":"2025-09-08T05:52:27.000Z","size":20329,"stargazers_count":96,"open_issues_count":9,"forks_count":15,"subscribers_count":3,"default_branch":"main","last_synced_at":"2025-09-08T07:08:41.597Z","etag":null,"topics":["development","golang","itgcommerce","magento","magento1","magento2","wordpress"],"latest_commit_sha":null,"homepage":"https://rewardenv.readthedocs.io","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rewardenv.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":".github/funding.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":"janosmiko"}},"created_at":"2021-01-29T17:53:08.000Z","updated_at":"2025-09-08T05:49:10.000Z","dependencies_parsed_at":"2022-08-09T15:57:09.578Z","dependency_job_id":"6e5eab36-2391-41de-b851-ee18d00e8132","html_url":"https://github.com/rewardenv/reward","commit_stats":{"total_commits":811,"total_committers":12,"mean_commits":67.58333333333333,"dds":0.2256473489519112,"last_synced_commit":"d7cac15ab81e52218580ef07edd635d1b57fe45c"},"previous_names":[],"tags_count":128,"template":false,"template_full_name":null,"purl":"pkg:github/rewardenv/reward","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rewardenv%2Freward","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rewardenv%2Freward/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rewardenv%2Freward/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rewardenv%2Freward/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rewardenv","download_url":"https://codeload.github.com/rewardenv/reward/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rewardenv%2Freward/sbom","scorecard":{"id":136024,"data":{"date":"2025-08-04","repo":{"name":"github.com/rewardenv/reward","commit":"ebaf0b8fed6e2ddd4eebe263965de09f03b573e9"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":4.2,"checks":[{"name":"Maintained","score":10,"reason":"29 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 0/23 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/actionlint.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-dnsmasq.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-elasticsearch.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-magepack.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-mailbox.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-mariadb.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-mysql.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-nginx.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-node-prod.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-node.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-opensearch-dashboards.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-opensearch.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-00-chain-default.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-00-chain.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-01-chain-root.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-02-chain-rootless.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-03-chain-web.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-04-chain-utils.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-05-chain-apps.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-cli-loaders.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-cli.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-base.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-blackfire.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-loaders.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-magento1-apps.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-magento1.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-magento2-apps.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-magento2-web-apps.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-magento2-web.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-magento2.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-base.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-blackfire.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-magento1-apps.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-magento1.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-magento2-apps.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-magento2-web-apps.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-magento2-web.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-magento2.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-shopware-apps.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-shopware-web-apps.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-shopware-web.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-shopware.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-spx.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-wordpress-apps.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-wordpress-web-apps.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-wordpress-web.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-wordpress.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-xdebug2.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-rootless-xdebug3.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-shopware-apps.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-shopware-web-apps.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-shopware-web.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-shopware.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-spx.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-wordpress-apps.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-wordpress-web-apps.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-wordpress-web.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-wordpress.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-xdebug2.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm-xdebug3.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-php-fpm.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-rabbitmq.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-redis.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-sshd.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-supervisord.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-valkey.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-build-varnish.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/golangci-lint.yml:15","Info: topLevel 'contents' permission set to 'read': .github/workflows/lint-dockerfiles.yml:12","Warn: no topLevel permission defined: .github/workflows/release.yml:1","Warn: no topLevel permission defined: .github/workflows/sonarcloud.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/spelling.yml:10","Warn: no topLevel permission defined: .github/workflows/stale.yml:1","Warn: no topLevel permission defined: .github/workflows/template-docker-build-php-app-web.yml:1","Warn: no topLevel permission defined: .github/workflows/template-docker-build-php-app.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/test.yml:14","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v0.7.8 not signed: https://api.github.com/repos/rewardenv/reward/releases/227359951","Warn: release artifact v0.7.7 not signed: https://api.github.com/repos/rewardenv/reward/releases/226701438","Warn: release artifact v0.7.6 not signed: https://api.github.com/repos/rewardenv/reward/releases/224807734","Warn: release artifact v0.7.5 not signed: https://api.github.com/repos/rewardenv/reward/releases/214718168","Warn: release artifact v0.7.4 not signed: https://api.github.com/repos/rewardenv/reward/releases/214698729","Warn: release artifact v0.7.8 does not have provenance: https://api.github.com/repos/rewardenv/reward/releases/227359951","Warn: release artifact v0.7.7 does not have provenance: https://api.github.com/repos/rewardenv/reward/releases/226701438","Warn: release artifact v0.7.6 does not have provenance: https://api.github.com/repos/rewardenv/reward/releases/224807734","Warn: release artifact v0.7.5 does not have provenance: https://api.github.com/repos/rewardenv/reward/releases/214718168","Warn: release artifact v0.7.4 does not have provenance: https://api.github.com/repos/rewardenv/reward/releases/214698729"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/actionlint.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/actionlint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-dnsmasq.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-dnsmasq.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-dnsmasq.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-dnsmasq.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-dnsmasq.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-dnsmasq.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-dnsmasq.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-dnsmasq.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-dnsmasq.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-dnsmasq.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-dnsmasq.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-dnsmasq.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-elasticsearch.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-elasticsearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-elasticsearch.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-elasticsearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-elasticsearch.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-elasticsearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-elasticsearch.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-elasticsearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-elasticsearch.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-elasticsearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-elasticsearch.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-elasticsearch.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-magepack.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-magepack.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-magepack.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-magepack.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-magepack.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-magepack.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-magepack.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-magepack.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-magepack.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-magepack.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-magepack.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-magepack.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-mailbox.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mailbox.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-mailbox.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mailbox.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-mailbox.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mailbox.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-mailbox.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mailbox.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-mailbox.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mailbox.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-mailbox.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mailbox.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-mariadb.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mariadb.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-mariadb.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mariadb.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-mariadb.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mariadb.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-mariadb.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mariadb.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-mariadb.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mariadb.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-mariadb.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mariadb.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-mysql.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mysql.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-mysql.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mysql.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-mysql.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mysql.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-mysql.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mysql.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-mysql.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mysql.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-mysql.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-mysql.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-nginx.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-nginx.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-nginx.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-nginx.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-nginx.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-nginx.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-nginx.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-nginx.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-nginx.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-nginx.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-nginx.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-nginx.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-node-prod.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-node-prod.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-node-prod.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-node-prod.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-node-prod.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-node-prod.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-node-prod.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-node-prod.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-node-prod.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-node-prod.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-node-prod.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-node-prod.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-node-prod.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-node-prod.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-node.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-node.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-node.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-node.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-node.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-node.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-node.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-node.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-node.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-node.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-node.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-node.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-opensearch-dashboards.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-opensearch-dashboards.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-opensearch-dashboards.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-opensearch-dashboards.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-opensearch-dashboards.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-opensearch-dashboards.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-opensearch-dashboards.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-opensearch-dashboards.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-opensearch-dashboards.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-opensearch-dashboards.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-opensearch-dashboards.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-opensearch-dashboards.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-opensearch.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-opensearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-opensearch.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-opensearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-opensearch.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-opensearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-opensearch.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-opensearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-opensearch.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-opensearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-opensearch.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-opensearch.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-00-chain.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-00-chain.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-00-chain.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-00-chain.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-00-chain.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-00-chain.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-00-chain.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-00-chain.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-00-chain.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-00-chain.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-00-chain.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-00-chain.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-cli-loaders.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-cli-loaders.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-cli-loaders.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-cli-loaders.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-cli-loaders.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-cli-loaders.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-cli-loaders.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-cli-loaders.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-cli-loaders.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-cli-loaders.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-cli-loaders.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-cli-loaders.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-cli-loaders.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-cli-loaders.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-cli.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-cli.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-cli.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-cli.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-cli.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-cli.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-cli.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-cli.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-cli.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-loaders.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-loaders.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-loaders.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-loaders.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-loaders.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-loaders.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-loaders.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-loaders.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-loaders.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-loaders.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-loaders.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-loaders.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-loaders.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-loaders.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento1-apps.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento1-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento1-apps.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento1-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento1-apps.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento1-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento1-apps.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento1-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento1-apps.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento1-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento1-apps.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento1-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento1-apps.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento1-apps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento2-apps.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento2-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento2-apps.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento2-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento2-apps.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento2-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento2-apps.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento2-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento2-apps.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento2-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento2-apps.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento2-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento2-apps.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento2-apps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento2-web-apps.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento2-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento2-web-apps.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento2-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento2-web-apps.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento2-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento2-web-apps.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento2-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento2-web-apps.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento2-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento2-web-apps.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento2-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-magento2-web-apps.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-magento2-web-apps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento1-apps.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento1-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento1-apps.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento1-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento1-apps.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento1-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento1-apps.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento1-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento1-apps.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento1-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento1-apps.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento1-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento1-apps.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento1-apps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento2-apps.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento2-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento2-apps.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento2-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento2-apps.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento2-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento2-apps.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento2-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento2-apps.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento2-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento2-apps.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento2-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento2-apps.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento2-apps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento2-web-apps.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento2-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento2-web-apps.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento2-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento2-web-apps.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento2-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento2-web-apps.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento2-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento2-web-apps.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento2-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento2-web-apps.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento2-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-magento2-web-apps.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-magento2-web-apps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-shopware-apps.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-shopware-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-shopware-apps.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-shopware-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-shopware-apps.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-shopware-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-shopware-apps.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-shopware-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-shopware-apps.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-shopware-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-shopware-apps.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-shopware-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-shopware-apps.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-shopware-apps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-shopware-web-apps.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-shopware-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-shopware-web-apps.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-shopware-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-shopware-web-apps.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-shopware-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-shopware-web-apps.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-shopware-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-shopware-web-apps.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-shopware-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-shopware-web-apps.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-shopware-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-shopware-web-apps.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-shopware-web-apps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-wordpress-apps.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-wordpress-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-wordpress-apps.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-wordpress-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-wordpress-apps.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-wordpress-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-wordpress-apps.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-wordpress-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-wordpress-apps.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-wordpress-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-wordpress-apps.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-wordpress-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-wordpress-apps.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-wordpress-apps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-wordpress-web-apps.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-wordpress-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-wordpress-web-apps.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-wordpress-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-wordpress-web-apps.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-wordpress-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-wordpress-web-apps.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-wordpress-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-wordpress-web-apps.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-wordpress-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-wordpress-web-apps.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-wordpress-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-rootless-wordpress-web-apps.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-rootless-wordpress-web-apps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-shopware-apps.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-shopware-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-shopware-apps.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-shopware-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-shopware-apps.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-shopware-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-shopware-apps.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-shopware-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-shopware-apps.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-shopware-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-shopware-apps.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-shopware-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-shopware-apps.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-shopware-apps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-shopware-web-apps.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-shopware-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-shopware-web-apps.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-shopware-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-shopware-web-apps.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-shopware-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-shopware-web-apps.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-shopware-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-shopware-web-apps.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-shopware-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-shopware-web-apps.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-shopware-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-shopware-web-apps.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-shopware-web-apps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-wordpress-apps.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-wordpress-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-wordpress-apps.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-wordpress-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-wordpress-apps.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-wordpress-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-wordpress-apps.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-wordpress-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-wordpress-apps.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-wordpress-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-wordpress-apps.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-wordpress-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-wordpress-apps.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-wordpress-apps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-wordpress-web-apps.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-wordpress-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-wordpress-web-apps.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-wordpress-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-wordpress-web-apps.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-wordpress-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-wordpress-web-apps.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-wordpress-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-wordpress-web-apps.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-wordpress-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-wordpress-web-apps.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-wordpress-web-apps.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm-wordpress-web-apps.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm-wordpress-web-apps.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-php-fpm.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-php-fpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-rabbitmq.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-rabbitmq.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-rabbitmq.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-rabbitmq.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-rabbitmq.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-rabbitmq.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-rabbitmq.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-rabbitmq.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-rabbitmq.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-rabbitmq.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-rabbitmq.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-rabbitmq.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-redis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-redis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-redis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-redis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-redis.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-redis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-redis.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-redis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-redis.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-redis.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-redis.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-redis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-sshd.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-sshd.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-sshd.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-sshd.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-sshd.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-sshd.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-sshd.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-sshd.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-sshd.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-sshd.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-sshd.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-sshd.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-supervisord.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-supervisord.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-supervisord.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-supervisord.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-supervisord.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-supervisord.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-supervisord.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-supervisord.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-supervisord.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-supervisord.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-supervisord.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-supervisord.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-valkey.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-valkey.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-valkey.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-valkey.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-valkey.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-valkey.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-valkey.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-valkey.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-valkey.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-valkey.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-valkey.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-valkey.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-varnish.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-varnish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-varnish.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-varnish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-varnish.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-varnish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-varnish.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-varnish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-varnish.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-varnish.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-varnish.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/docker-build-varnish.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/golangci-lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/golangci-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/golangci-lint.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/golangci-lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/golangci-lint.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/golangci-lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint-dockerfiles.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/lint-dockerfiles.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint-dockerfiles.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/lint-dockerfiles.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint-dockerfiles.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/lint-dockerfiles.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonarcloud.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/sonarcloud.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sonarcloud.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/sonarcloud.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/spelling.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/spelling.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/spelling.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/spelling.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app-web.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app-web.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app-web.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app-web.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app-web.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app-web.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app-web.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app-web.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app-web.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app-web.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app-web.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app-web.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app-web.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app-web.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app-web.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app-web.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app-web.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app-web.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app-web.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app-web.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/template-docker-build-php-app.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/template-docker-build-php-app.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/rewardenv/reward/test.yml/main?enable=pin","Warn: npmCommand not pinned by hash: images/magepack/tpl.Dockerfile:12-14","Warn: pipCommand not pinned by hash: images/php-fpm-rootless/base/tpl.Dockerfile:51-111","Warn: pipCommand not pinned by hash: images/php-fpm-rootless/base/tpl.Dockerfile:104-111","Warn: npmCommand not pinned by hash: images/php-fpm-rootless/base/tpl.Dockerfile:105-112","Warn: npmCommand not pinned by hash: images/php-fpm-rootless/magento1/tpl.Dockerfile:14-25","Warn: npmCommand not pinned by hash: images/php-fpm-rootless/magento2/tpl.Dockerfile:18-44","Warn: pipCommand not pinned by hash: images/php-fpm/base/tpl.Dockerfile:51-110","Warn: pipCommand not pinned by hash: images/php-fpm/base/tpl.Dockerfile:52-111","Warn: npmCommand not pinned by hash: images/php-fpm/base/tpl.Dockerfile:54-113","Warn: npmCommand not pinned by hash: images/php-fpm/magento1/tpl.Dockerfile:14-25","Warn: npmCommand not pinned by hash: images/php-fpm/magento2/tpl.Dockerfile:19-44","Warn: downloadThenRun not pinned by hash: images/varnish/tpl.Dockerfile:31-63","Warn: downloadThenRun not pinned by hash: images/varnish/tpl.Dockerfile:107-127","Warn: downloadThenRun not pinned by hash: .github/workflows/actionlint.yml:19","Warn: downloadThenRun not pinned by hash: .github/workflows/docker-build-node-prod.yml:22","Warn: downloadThenRun not pinned by hash: .github/workflows/template-docker-build-php-app-web.yml:29","Info:   0 out of  52 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of 222 third-party GitHubAction dependencies pinned","Info:   0 out of   4 pipCommand dependencies pinned","Info:   0 out of   5 downloadThenRun dependencies pinned","Info:   0 out of   7 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-build-dnsmasq.yml:16"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 7 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":8,"reason":"2 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-x4rx-4gw3-53p4","Warn: Project is vulnerable to: GO-2025-3787 / GHSA-fv92-fjc5-jj9h"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-16T06:33:22.885Z","repository_id":40261378,"created_at":"2025-08-16T06:33:22.885Z","updated_at":"2025-08-16T06:33:22.885Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278981518,"owners_count":26079640,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-08T02:00:06.501Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["development","golang","itgcommerce","magento","magento1","magento2","wordpress"],"created_at":"2024-11-28T14:13:02.878Z","updated_at":"2025-10-08T17:11:23.148Z","avatar_url":"https://github.com/rewardenv.png","language":"Go","funding_links":["https://github.com/sponsors/janosmiko","https://www.buymeacoffee.com/janosmiko","https://www.patreon.com/janosmiko","https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick\u0026hosted_button_id=LUCSKSMFENMHN"],"categories":[],"sub_categories":[],"readme":"![Reward Logo](./docs/imgs/reward-github-card.png)\n\n# Reward\n\n[![Lines of Code](https://sonarcloud.io/api/project_badges/measure?project=rewardenv_reward\u0026metric=ncloc)](https://sonarcloud.io/dashboard?id=rewardenv_reward)\n[![Go Report Card](https://goreportcard.com/badge/github.com/rewardenv/reward)](https://goreportcard.com/report/github.com/rewardenv/reward)\n[![Security Rating](https://sonarcloud.io/api/project_badges/measure?project=rewardenv_reward\u0026metric=security_rating)](https://sonarcloud.io/dashboard?id=rewardenv_reward)\n[![Vulnerabilities](https://sonarcloud.io/api/project_badges/measure?project=rewardenv_reward\u0026metric=vulnerabilities)](https://sonarcloud.io/dashboard?id=rewardenv_reward)\n[![Maintainability Rating](https://sonarcloud.io/api/project_badges/measure?project=rewardenv_reward\u0026metric=sqale_rating)](https://sonarcloud.io/dashboard?id=rewardenv_reward)\n\n\u003c!-- include_open_start --\u003e\n\nReward is a Swiss Army knife CLI utility for orchestrating Docker based development environments. It makes possible to\nrun multiple local environments simultaneously without port conflicts by utilizing common services proxying requests to\nthe correct environment's containers.\n\nReward is written in Go, and it supports Linux, macOS and Windows (and WSL2).\n\u003c!-- include_open_stop --\u003e\n\nReward was inspired by Warden. See the Acknowledgment section for more info.\n\nReward was created under the aegis of [ITG Commerce](https://itgcommerce.com).\n\n* [Documentation](https://rewardenv.readthedocs.io)\n* [Installation](https://rewardenv.readthedocs.io/en/latest/installation.html)\n* [Environments](https://rewardenv.readthedocs.io/en/latest/environments.html)\n* [Docker Images](https://github.com/rewardenv/reward/tree/main/images)\n\n## Features\n\n- Traefik for SSL termination and routing/proxying requests into the correct containers.\n- Portainer for quick visibility into what's running inside the local Docker host.\n- Dnsmasq to serve DNS responses for `*.test` domains eliminating manual editing of `/etc/hosts`\n- An SSH tunnel for connecting from Sequel Pro or TablePlus into any one of multiple running database containers.\n- Reward issued wildcard SSL certificates for running https on all local development domains.\n- A common PHPMyAdmin (or optionally Adminer) container for database management.\n- An ElasticHQ container for the ability to manage the Elasticsearch Clusters.\n- Full support for Magento 1, Magento 2, PWA Studio, Laravel, Symfony 4, Shopware 6, WordPress and more on all major\n    operating systems\n- Ability to override, extend, or setup completely custom environment definitions on a per-project basis.\n\n\u003c!-- include_open_stop --\u003e\n\n## Installation\n\n![Installing Reward](./docs/imgs/install.gif)\n\nFind out more: [Installation](https://rewardenv.readthedocs.io/en/latest/installation.html)\n\n## Initializing WordPress\n\n![Initializing WordPress](./docs/imgs/initialize-wordpress.gif)\n\nFind out\nmore: [Initializing WordPress](https://rewardenv.readthedocs.io/en/latest/environments/initializing-wordpress.html)\n\n## Initializing Magento 2\n\n![Initializing Magento 2](./docs/imgs/initialize-magento2.gif)\n\nFind out\nmore: [Initializing Magento 2](https://rewardenv.readthedocs.io/en/latest/environments/initializing-magento2.html)\n\n## Contributing\n\nAll contributions to the Reward project are welcome: use-cases, documentation, code, patches, bug reports, feature\nrequests, etc. Any and all contributions may be made by submitting Issues and Pull Requests here on GitHub.\n\nPlease note that by submitting a pull request or otherwise contributing to the Reward project, you warrant that each of\nyour contributions is an original work and that you have full authority to grant rights to said contribution and by so\ndoing you grant the owners of the Reward project, and those who receive the contribution directly or indirectly, a\nperpetual, worldwide, non-exclusive, royalty-free, irrevocable license to make, have made, use, offer to sell, sell and\nimport or otherwise dispose of the contributions alone or with the Reward project in its entirety.\n\n## Join the Community\n\nDo you have a question? Feel free to ask it! Join Reward's Slack community today!\n\n[Join Slack](http://rewardslack.janosmiko.com)\n\n## Author Information\n\nThis project was started in 2021 by Janos Miko.\n\nLike my work?\n\n[![Buy Me A Coffee ☕](https://www.buymeacoffee.com/assets/img/custom_images/orange_img.png)](https://www.buymeacoffee.com/janosmiko)\n\n[![Patreon](https://img.shields.io/badge/Donate-Patreon-red.svg)](https://www.patreon.com/janosmiko)\n[![PayPal](https://img.shields.io/badge/Donate-PayPal-green.svg)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick\u0026hosted_button_id=LUCSKSMFENMHN)\n\n## License\n\nThis work is licensed under the MIT license. See LICENSE file for details.\n\n## Acknowledgement\n\nReward was inspired by Warden and most of its functionalities are reused/rewritten in Reward, so HUGE thanks to David\nAlger and all the contributors for creating it.\n\u003c!-- include_open_stop --\u003e\n\n* [Warden's homepage](https://warden.dev)\n* All images used for the logo are copyright to their respective owners.\n\n## Stargazers over time\n\n[![Stargazers over time](https://starchart.cc/rewardenv/reward.svg)](https://starchart.cc/rewardenv/reward)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frewardenv%2Freward","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frewardenv%2Freward","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frewardenv%2Freward/lists"}