actions/checkout@v2, actions/setup-go@v2, sigstore/cosign-installer@main, and docker/setup-buildx-action@v1 are not allowed to be used in giantswarm/kyverno-upstream. Actions in this workflow must be: within a repository owned by giantswarm or matching the following: actions/checkout@v3, tibdex/github-app-token@v1.