The action loiclefevre/test@a802f8bb53b42b16c253d75f86b06360d150c6e4 is not allowed in hibernate/hibernate-orm because all actions must be from a repository owned by hibernate, created by GitHub, or match one of the patterns: azure/setup-helm@*, dependabot/*, docker/login-action@*, graalvm/setup-graalvm@*, oracle-actions/setup-testpilot@*, redhat-actions/*. All actions must also be pinned to a full-length commit SHA.