The actions sonarsource/sonarcloud-github-action@master, docker/login-action@v2, pypa/gh-action-pypi-publish@release/v1, rtcamp/action-slack-notify@v2, sendgrid/dx-automator/actions/release@main, and 3 others are not allowed in twilio/twilio-python because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: NuGet/login@8d196754b4036150537f80ac539e15c2f1028841, astral-sh/setup-uv@0c5e2b8115b80b4c7c5ddf6ffdd634974642d182, digicert/code-signing-software-trust-action@fae23a455ba4bde62b64fd7cb2f81ade788f5a95, pypa/gh-action-pypi-publish@4cf0fdb7e1623e99dab752bc00bab23c0b69d050, pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b, sendgrid/dx-automator/actions/release@*, shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240. All actions must also be pinned to a full-length commit SHA.