actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633, actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32, actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a, and codecov/codecov-action@c16abc29c95fcf9174b58eb7e1abf4c866893bc8 are not allowed to be used in giantswarm/kyverno-upstream. Actions in this workflow must be: within a repository owned by giantswarm or matching the following: actions/checkout@v3, tibdex/github-app-token@v1.