The actions webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 and dtolnay/rust-toolchain@67ef31d5b988238dd797d409d6f9574278e20537 are not allowed in hyperpolymath/refugia because all actions must be from a repository owned by hyperpolymath, created by GitHub, verified in the GitHub Marketplace, or match one of the patterns: editorconfig-checker/action-editorconfig-checker@*, haskell-actions/setup@*. All actions must also be pinned to a full-length commit SHA.