The action zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d is not allowed in geico/polaris because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: benjlevesque/short-sha@v2.1, codecov/codecov-action@v5, docker/login-action@v3, gsactions/commit-message-checker@v2, oras-project/setup-oras@v1, svenstaro/upload-release-action@v2, trufflesecurity/trufflehog@*.