The action aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 is not allowed in oracle/coherence-eclipse-plugin because all actions must be from a repository owned by your enterprise, created by GitHub, or match one of the patterns: docker/*, gradle/actions/wrapper-validation*, gradle/wrapper-validation-action*, microsoft/setup-msbuild@v1.0.2, ossf/scorecard-action*, ruby/setup-ruby*, slsa-framework/slsa-github-generator*.