The actions actions/checkout@v6, github/codeql-action/init@v4, github/codeql-action/autobuild@v4, and github/codeql-action/analyze@v4 are not allowed in kennylam/carbon-for-ibm-dotcom because all actions must be from a repository owned by kennylam.