The actions actions/checkout@v4 and actions/setup-node@v4 are not allowed in digital-analytics-program/gov-wide-code because all actions must be pinned to a full-length commit SHA.