The action mikepenz/action-junit-report@v5 is not allowed in nedap/gobley because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: 8BitJonny/gh-get-current-pr@*, ArtiomTr/jest-coverage-report-action@*, DeLaGuardo/setup-clojure@*, JamesIves/github-pages-deploy-action@*, LocalStack/setup-localstack@*, LoveToKnow/slackify-markdown-action@*, OP5dev/TF-via-PR@*, PavanMudigonda/jacoco-reporter@*, RoadieHQ/backstage-entity-validator@*, Swatinem/rust-cache@*, Wandalen/wretry.action@*, actions4gh/setup-gh@*, ahmadnassri/action-dependabot-auto-merge@*, amannn/action-semantic-pull-request@*, anchore/sbom-action@*, anchore/scan-action@*, android-actions/setup-android@*, anthropics/claude-code-action@*, anthropics/claude-code-base-action@*, appleboy/ssh-action@*, aquasecurity/*, archive/github-actions-slack@*, arduino/setup-protoc@*, asdf-vm/actions/*, astral-sh/ruff-action@*, astral-sh/setup-uv@v7, ataylorme/eslint-annotate-action@...