The actions github/codeql-action/init@v3, github/codeql-action/start-proxy@v3, github/codeql-action/resolve-environment@v3, actions/setup-go@v5, github/codeql-action/autobuild@v3, and 1 other are not allowed in bugbundle/phantom because all actions must be from a repository owned by bugbundle or match one of the patterns: actions/checkout@*, redhat-actions/buildah-build@*, redhat-actions/push-to-registry@*.