The action jlumbroso/[email protected] is not allowed in oracle-livelabs/security because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: aquasecurity/setup-trivy*, aquasecurity/trivy-action*, docker/*, gradle/actions/wrapper-validation*, gradle/wrapper-validation-action*, microsoft/[email protected], ossf/scorecard-action*, ruby/setup-ruby*, slsa-framework/slsa-github-generator*.