The actions actions/setup-java@v1, peternied/download-file@v2, and peternied/action-sleep@v1 are not allowed in opensearch-project/alerting-dashboards-plugin because all actions must be pinned to a full-length commit SHA.