The actions actions/checkout@v2 and reviewdog/action-yamllint@v1 are not allowed in rhythmictech/terraform-aws-client-vpn-federated because all actions must be pinned to a full-length commit SHA.