The actions actions/checkout@v4 and actions/upload-artifact@v4 are not allowed in ethereum-optimism/optimism because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: actions/download-artifact@*, actions/upload-artifact@*, docker/bake-action/subaction/matrix@*, docker/bake-action@*, docker/build-push-action@*, docker/login-action@*, docker/metadata-action@*, docker/setup-buildx-action@*, docker/setup-qemu-action@*, google-github-actions/auth@*, jdx/mise-action@c1ecc8f748cd28cdeabf76dab3cccde4ce692fe4, ossf/scorecard-action@*, step-security/harden-runner@*. All actions must also be pinned to a full-length commit SHA.