The actions actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 and gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a are not allowed in SocketDev/socket-cli because all actions must be from a repository owned by your enterprise or match one of the patterns: actions/cache/restore@*, actions/cache/save@*, actions/cache@*, actions/checkout@*, actions/deploy-pages@*, actions/download-artifact@*, actions/github-script@*, actions/setup-go@*, actions/setup-node@*, actions/setup-python@*, actions/upload-artifact@*, actions/upload-pages-artifact@*, depot/build-push-action@*, depot/setup-action@*, github/codeql-action/upload-sarif@*. All actions must also be pinned to a full-length commit SHA.