The actions actions/checkout@v4, github/codeql-action/init@v3, github/codeql-action/start-proxy@v3, github/codeql-action/analyze@v3, and actions/github-script@v7 are not allowed in popvilla/PowerBI_As_Low_Code_IDE because all actions must be from a repository owned by popvilla and pinned to a full-length commit SHA.