The action actions/checkout@v6 is not allowed in conforma/cli because all actions must be from a repository owned by your enterprise, created by GitHub, verified in the GitHub Marketplace, or match one of the patterns: JamesIves/*, anchore/*, codecov/*, conforma/*, docker/*, fullsend-ai/*, google-github-actions/*, helm/*, imjasonh/*, jlumbroso/*, mikefarah/*, oras-project/*, ossf/*, peter-evans/*, redhat-actions/*, sigstore/*, slsa-framework/*, softprops/*, step-security/*. All actions must also be pinned to a full-length commit SHA.