The actions stefanzweifel/git-auto-commit-action@b863ae1933cb653a53c021fe36dbb774e1fb9403 and peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e are not allowed in cert-manager/aws-privateca-issuer because all actions must be from a repository owned by cert-manager, created by GitHub, verified in the GitHub Marketplace, or match the pattern: aws-pca-k8s-plugin-ops-admin/*.