actions/checkout@v2 and actions/setup-python@v2 are not allowed to be used in Decurity/semgrep-smart-contracts. Actions in this workflow must be: within a repository owned by Decurity.