The actions actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd, github/codeql-action/init@bc0b696b4103f5fe60f15749af68a046868d511a, github/codeql-action/autobuild@bc0b696b4103f5fe60f15749af68a046868d511a, and github/codeql-action/analyze@bc0b696b4103f5fe60f15749af68a046868d511a are not allowed in faker-ruby/faker because all actions must be from a repository owned by faker-ruby or match the pattern: ruby/setup-ruby. All actions must also be pinned to a full-length commit SHA.