Finding Unpinned and Unpinnable GitHub Actions

How to identify unpinned and unpinnable GitHub actions across your organisation