The actions actions/checkout@v4, actions/setup-python@v5, azure/setup-helm@v4.3.0, and helm/chart-testing-action@v2.7.0 are not allowed in bedag/helm-charts because all actions must be from a repository owned by bedag, created by GitHub, or match one of the patterns: actions/*, azure/*, docker/*, golangci/golangci-lint-action@*, helm/*, morrisoncole/*, pascalgn/*. All actions must also be pinned to a full-length commit SHA and not match any of the patterns: checkmarx/ast-github-action@*, checkmarx/kics-github-action@*.