actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11, ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736, actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32, and github/codeql-action/upload-sarif@cdcdbb579706841c47f7063dda365e292e5cad7a are not allowed to be used in Deveryware/kyverno. Actions in this workflow must be: within a repository owned by Deveryware.