The actions actions/setup-java@v4 and gradle/actions/setup-gradle@v4 are not allowed in SocketDev/socket-cli because all actions must be from a repository owned by your enterprise or match one of the patterns: actions/cache/restore@*, actions/cache/save@*, actions/cache@*, actions/checkout@*, actions/deploy-pages@*, actions/download-artifact@*, actions/github-script@*, actions/setup-go@*, actions/setup-node@*, actions/setup-python@*, actions/upload-artifact@*, actions/upload-pages-artifact@*, depot/build-push-action@*, depot/setup-action@*, github/codeql-action/upload-sarif@*. All actions must also be pinned to a full-length commit SHA.