The action docker/login-action@v184bdaa0721073962dff0199f1fb9940f07167d1 is not allowed in docker/aws-kms-sign-csr because all actions must be pinned to a full-length commit SHA.