The actions actions/checkout@v4, actions/setup-node@v4, and github/codeql-action/init@v3 are not allowed in aignostics/typescript-sdk because all actions must be pinned to a full-length commit SHA.