The actions actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 and gradle/actions/setup-gradle@0b6dd653ba04f4f93bf581ec31e66cbd7dcb644d are not allowed in SocketDev/socket-cli because all actions must be from a repository owned by your enterprise or match one of the patterns: actions/cache/restore@*, actions/cache/save@*, actions/cache@*, actions/checkout@*, actions/deploy-pages@*, actions/download-artifact@*, actions/github-script@*, actions/setup-go@*, actions/setup-node@*, actions/setup-python@*, actions/upload-artifact@*, actions/upload-pages-artifact@*, depot/build-push-action@*, depot/setup-action@*, github/codeql-action/upload-sarif@*. All actions must also be pinned to a full-length commit SHA.