The actions actions/checkout@v3, azure/setup-helm@v3, actions/setup-python@v4, and helm/chart-testing-action@v2.3.1 are not allowed in kubernetes/cloud-provider-openstack because all actions must be pinned to a full-length commit SHA.