The actions actions/checkout@v2, actions/setup-python@v2, and pre-commit/action@v2.0.3 are not allowed in rhythmictech/terraform-aws-client-vpn-federated because all actions must be pinned to a full-length commit SHA.