actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11, helm/chart-releaser-action@be16258da8010256c6e82849661221415f031968, docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d, sigstore/cosign-installer@11086d25041f77fe8fe7b9ea4e48e3b9192b8f19, and oras-project/setup-oras@ee7dbe1144cb00080a89497f937dae78f85fce29 are not allowed to be used in davidfestal/helm-backstage. Actions in this workflow must be: within a repository owned by davidfestal.