The actions actions/checkout@v4, actions/setup-python@v5, pypa/[email protected], and actions/github-script@v7 are not allowed in SocketDev/socket-siem-connector because all actions must be pinned to a full-length commit SHA.