The action actions/checkout@v5 is not allowed in owncloud/android because all actions must be from a repository owned by owncloud, created by GitHub, verified in the GitHub Marketplace, or match one of the patterns: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50, amannn/action-semantic-pull-request@e32d7e603df1aa1ba07e981f2a23455dee596825, peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0, shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f, toolhippie/calens:0.4.0@sha256:728ee4d17b6a3ec40f1a34363d56abbfe7c52f57b9cd6233ee34b82345ccc07f, transifex/cli-action@584fd205cbe598773b5a81ce711fa44842678189. All actions must also be pinned to a full-length commit SHA.