The actions actions/checkout@v2 and robertdebock/molecule-action@2.0.0 are not allowed in rhythmictech/ansible-role-tomcat because all actions must be pinned to a full-length commit SHA.