The actions actions/checkout@v5, actions/setup-node@v5, github/codeql-action/upload-sarif@v3, docker/setup-buildx-action@v3, docker/login-action@v3, and 4 others are not allowed in fladry-creative/PatchPath-AI because all actions must be from a repository owned by fladry-creative, created by GitHub, verified in the GitHub Marketplace, or match one of the patterns: actions/cache@*, actions/checkout@*, actions/download-artifact@*, actions/setup-python@*, actions/upload-artifact@*, github/codeql-action/*. All actions must also be pinned to a full-length commit SHA.