The actions actions/checkout@v6.0.2 and actions/setup-go@v6 are not allowed in kubernetes/cloud-provider-vsphere because all actions must be pinned to a full-length commit SHA.