actions/checkout@v2, actions/setup-dotnet@v1, github/ossar-action@v1, and github/codeql-action/upload-sarif@v1 are not allowed to be used in Apollo-o/Whistle. Actions in this workflow must be: within a repository owned by Apollo-o.