BUG: pipCommand not pinned by hash is not affecting the score

[joycebrum]

Describe the bug
This pip install is being identified by the Scorecard as a Warn: pipCommand not pinned by hash but it is not affecting the score at all.

Reproduction steps
Steps to reproduce the behavior:

1. run

scorecard --repo https://github.com/joycebrum/x86_64 --checks Pinned-Dependencies --format json --show-details --commit 9ddec47afa76d8d8de4e21396f3c0256b29dfc02

3. The score should be 10/10
4. The details should mention a pipCommand not pinned by hash found.

Expected behavior
Not sure how much it should affect the score, but it should affect it since it is mentioned as a warn.

[joycebrum]

Probably will be fixed on #2582