The action actions/checkout@v3 is not allowed in tektoncd/website because all actions must be from a repository owned by tektoncd, created by GitHub, verified in the GitHub Marketplace, or match one of the patterns: agilepathway/label-checker@*, alexellis/arkade-get@*, alexellis/setup-arkade@*, chainguard-dev/actions/kind-diag@*, chainguard-dev/actions/setup-kind@*, chartboost/ruff-action@*, docker://agilepathway/pull-request-label-checker@*, fgrosse/go-coverage-report@*, get-woke/woke-action@*, golangci/golangci-lint-action@*, helm/kind-action@*, imjasonh/setup-crane@*, imjasonh/setup-ko@*, jitterbit/get-changed-files@*, ko-build/setup-ko@*, peter-evans/create-or-update-comment@*, peter-evans/create-pull-request@*, peter-evans/slash-command-dispatch@*, tj-actions/changed-files@*. All actions must also be pinned to a full-length commit SHA.