The action zizmorcore/zizmor-action@6599ee8b7a49aef6a770f63d261d214911a7ce02 is not allowed in DNSCrypt/dnscrypt-proxy because all actions must be from a repository owned by DNSCrypt, created by GitHub, verified in the GitHub Marketplace, or match one of the patterns: ShiftLeftSecurity/scan-action@*, goto-bus-stop/setup-zig@*, hecrj/setup-rust-action@*, roots/issue-closer@*, softprops/action-gh-release@*, zizmorecore/zizmor-action@*. All actions must also be pinned to a full-length commit SHA.