The actions actions/checkout@v4.1.1 and actions/setup-go@v5.0.0 are not allowed in kubewarden/kubewarden-controller because all actions must be pinned to a full-length commit SHA.