The actions aquasecurity/trivy-action@0.34.2 and actions/checkout@v4 are not allowed in sovity/edc-ce because all actions must be from a repository owned by sovity, created by GitHub, verified in the GitHub Marketplace, or match one of the patterns: BetaHuhn/repo-file-sync-action@8b92be3375cf1d1b0cd579af488a9255572e4619, Legion2/swagger-ui-action@eff65dc3f193f0a749872be82f74baa35be0797d, actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e, actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7, actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd, actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48, actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c, actions/first-interaction@1c4688942c71f71d4f5502a26ea67c331730fa4d, actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff, actions/setup-java@17f84c3641ba7b8f6deff6309fc4c864478f5d62, actions/setup-java@be666c2fcd27...