anchore/sbom-action@v0 and anchore/scan-action@v3 are not allowed to be used in tektronix/tm_devices. Actions in this workflow must be: within a repository owned by tektronix, created by GitHub, or matching the following: hynek/build-and-inspect-python-package@*, initialstate/file-check-action@*, re-actors/alls-green@*, thedoctor0/zip-release@*, codecov/codecov-action@*, pypa/gh-action-pypi-publish@*, rowi1de/auto-assign-review-teams@*, nick-fields/retry@*, python-semantic-release/python-semantic-release@*, python-semantic-release/upload-to-gh-release@*, crazy-max/ghaction-import-gpg@*, dawidd6/action-download-artifact@*, stefanzweifel/git-auto-commit-action@*.