The action peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 is not allowed in equinor/isar because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: actions/download-artifact*, aquasecurity/setup-trivy@*, aquasecurity/trivy-action@*, astral-sh/setup-uv@*, crazy-max/ghaction-github-labeler@v5, docker/*, leonsteinhaeuser/project-beta-automations@*, peter-evans/create-pull-request@*, peter-evans/find-comment@*, tj-actions/changed-files@*.