google/osv-scanner/.github/workflows/osv-scanner-reusable-pr.yml@c50977954ca3d2cc4cf37c52d2dec3e75a97b7a5 is not allowed to be used in build-trust/ockam. Reusable workflows in this workflow must be: within a repository owned by build-trust or matching the following: actions/checkout@*, actions/setup-java@*, actions/cache@*, github/codeql-action/upload-sarif@*, ossf/scorecard-action@*, actions/create-release@*, actions/upload-release-asset@*, sigstore/cosign-installer@*, actions-rs/toolchain@*, docker://ghcr.io/build-trust/*, docker/login-action@*, docker/setup-qemu-action@*, docker/setup-buildx-action@*, actions/setup-node@*, cachix/install-nix-action@*, actions/upload-artifact@*, Swatinem/rust-cache@*, DeterminateSystems/nix-installer-action@*, DeterminateSystems/magic-nix-cache-action@*, pnpm/action-setup@*, DeterminateSystems/update-flake-lock@*.