actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 and codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d are not allowed to be used in giantswarm/kyverno-upstream. Actions in this workflow must be: within a repository owned by giantswarm or matching the following: actions/checkout@v3, tibdex/github-app-token@v1.