actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11, helm/chart-releaser-action@a917fd15b20e8b64b94d9158ad54cd6345335584, docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d, sigstore/cosign-installer@1fc5bd396d372bee37d608f955b336615edf79c8, and oras-project/setup-oras@ee7dbe1144cb00080a89497f937dae78f85fce29 are not allowed to be used in davidfestal/helm-backstage. Actions in this workflow must be: within a repository owned by davidfestal.