The action actions/cache@v4 is not allowed in pedropombeiro/dotfiles because all actions must be from a repository owned by pedropombeiro, created by GitHub, or match one of the patterns: gitleaks/gitleaks-action@*, nebularg/actions-luacheck@*, pre-commit/action@*. All actions must also be pinned to a full-length commit SHA.