actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579, actions/setup-go@424fc82d43fa5a37540bae62709ddcc23d9520d4, sigstore/cosign-installer@116dc6872c0a067bcb78758f18955414cdbf918f, actions/cache@fd5de65bc895cf536527842281bea11763fefd77, aquasecurity/trivy-action@40c4ca9e7421287d0c5576712fdff370978f9c3c, and 5 other actions are not allowed to be used in giantswarm/kyverno-upstream. Actions in this workflow must be: within a repository owned by giantswarm or matching the following: actions/checkout@v3, tibdex/github-app-token@v1.