The actions actions/checkout@v4 and github/codeql-action/init@v3 are not allowed in organvm-i-theoria/sema-metra--alchemica-mundi because all actions must be pinned to a full-length commit SHA.