actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 and aquasecurity/trivy-action@fbd16365eb88e12433951383f5e99bd901fc618f are not allowed to be used in giantswarm/kyverno-upstream. Actions in this workflow must be: within a repository owned by giantswarm or matching the following: actions/checkout@v3, tibdex/github-app-token@v1.