actions/github-script@v7 and googleapis/release-please-action@v4 are not allowed to be used in giantswarm/trivy-upstream. Actions in this workflow must be: within a repository owned by giantswarm or matching the following: actions/checkout@v3, actions/create-github-app-token@v1.