actions/checkout@v4.1.6, actions/setup-go@v5, aquaproj/aqua-installer@v3.0.1, and actions/cache@v4 are not allowed to be used in giantswarm/trivy-upstream. Actions in this workflow must be: within a repository owned by giantswarm or matching the following: actions/checkout@v3, actions/create-github-app-token@v1.