The actions actions/checkout@v4 and docker-library/bashbrew@head are not allowed in nextcloud/docker because all actions must be pinned to a full-length commit SHA.