The actions ruby/setup-ruby@v1, sonarsource/sonarcloud-github-action@master, docker/login-action@v2, rtcamp/action-slack-notify@v2, sendgrid/dx-automator/actions/release@main, and 2 others are not allowed in twilio/twilio-ruby because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: NuGet/login@8d196754b4036150537f80ac539e15c2f1028841, astral-sh/setup-uv@0c5e2b8115b80b4c7c5ddf6ffdd634974642d182, digicert/code-signing-software-trust-action@fae23a455ba4bde62b64fd7cb2f81ade788f5a95, docker/login-action@dbcb813823bdd20940b903addbd779551569679f, docker/oidc-action@b048fb089ace3e15a5fbdd784f4784d284ce5e8d, pypa/gh-action-pypi-publish@4cf0fdb7e1623e99dab752bc00bab23c0b69d050, pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b, sendgrid/*, shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240. All actions must also be pinned to a full-length commit SHA.