The actions actions/checkout@v4 and actions/upload-artifact@v4 are not allowed in Checkmarx/kics-cdk-validator-plugin because all actions must be pinned to a full-length commit SHA.