The action docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 is not allowed in cap-js/cds-dbs because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd, actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10, actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e, amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50, docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd, googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7. All actions must also be pinned to a full-length commit SHA.