The actions actions/checkout@v4, actions/upload-pages-artifact@v3, and actions/deploy-pages@v4 are not allowed in ofthemachine/100hellos-docs because all actions must be from a repository owned by ofthemachine, created by GitHub, verified in the GitHub Marketplace, or match one of the patterns: actions/checkout@*, actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, actions/setup-go@d35c59abb061a4a6fb18e82ac086f2c26744d6ab5, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36, peter-evans/dockerhub-description@432a30c9e07499fd01da9f8a49f0faf9e0ca5b77, securego/gosec@dcf93a8b8ba2a90270e0ce35291cca8f7a4a90be, softprops/action-gh-release@5be0e66d93ac7ed76da52eca8bb058f665c3a5fe. All actions must also be pinned to a full-length commit SHA.