The action actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 is not allowed in SocketDev/socket-cli because all actions must be from a repository owned by your enterprise or match one of the patterns: actions/cache/restore@*, actions/cache/save@*, actions/cache@*, actions/checkout@*, actions/deploy-pages@*, actions/download-artifact@*, actions/github-script@*, actions/setup-go@*, actions/setup-node@*, actions/setup-python@*, actions/upload-artifact@*, actions/upload-pages-artifact@*, depot/build-push-action@*, depot/setup-action@*, github/codeql-action/upload-sarif@*, github/gh-aw-actions/*. All actions must also be pinned to a full-length commit SHA.