github/dependabot-action@main is not allowed to be used in palantir/bouncer. Actions in this workflow must be: within a repository owned by palantir or matching the following: actions/cache@*, actions/checkout@*, actions/download-artifact@*, actions/setup-go@*, actions/setup-node@*, actions/upload-artifact@*, azohra/shell-linter@*, docker/login-action@*, github/codeql-action@*, gradle/wrapper-validation-action@*, softprops/action-gh-release@*, r-lib/actions/*@*, github/codeql-action/init@*, github/codeql-action/analyze@*, crazy-max/ghaction-import-gpg@*, goreleaser/goreleaser-action@*, actions/dependency-review-action@*, github/codeql-action/autobuild@*, changesets/action@*, pnpm/action-setup@*, helm/chart-testing-action@*, actions/setup-python@*, azure/setup-helm@*, sigstore/cosign-installer@*, DavidAnson/markdownlint-cli2-action@*.