rules:
  unpinned-uses:
    config:
      policies:
        bitwarden/gh-actions/*: ref-pin