amannn/action-semantic-pull-request@v5 is not allowed to be used in giantswarm/trivy-upstream. Actions in this workflow must be: within a repository owned by giantswarm or matching the following: actions/checkout@v3, actions/create-github-app-token@v1.