stoplightio/spectral-action@latest is not allowed to be used in dsmf/tx-item-relationship-service. Actions in this workflow must be: within a repository owned by dsmf, created by GitHub, or matching the following: actions/checkout@v4, actions/setup-java@v4, actions/cache@v4, enricomi/[email protected], peter-evans/find-comment@v3, peter-evans/create-or-update-comment@v4, docker/login-action@v3, peter-evans/dockerhub-description@v4, and aquasecurity/trivy-action@master, aquasecurity/trivy-action@master.