The action actions/download-artifact@v8 is not allowed in thomasleplus/google-apps-scripts because all actions must be from a repository owned by thomasleplus, created by GitHub, or match one of the patterns: Azure/*, actions/*, aws-actions/*, docker/*, github/*, google-github-actions/*, google/*, googleapis/*, microsoft/*, ossf/*, sigstore/*, super-linter/super-linter@*. All actions must also be pinned to a full-length commit SHA.