actions/checkout@v3 and actions/dependency-review-action@v3 are not allowed to be used in leonardoadame/dependabot-core. Actions in this workflow must be: within a repository owned by leonardoadame or matching the following: For a reusable workflow, the syntax is OWNER/REPOSITORY/PATH/FILENAME@TAG-OR-SHA. For example, octo-org/another-repo/.github/workflows/workflow.yml@v1. For more information, see "Reusing workflows.".