The action aquasecurity/trivy-action@0.35.0 is not allowed in oracle/coherence-cli because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: docker/*, gradle/actions/wrapper-validation*, gradle/wrapper-validation-action*, microsoft/setup-msbuild@v1.0.2, ossf/scorecard-action*, ruby/setup-ruby*, slsa-framework/slsa-github-generator*.