The action zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa is not allowed in DNSCrypt/dnscrypt-proxy because all actions must be from a repository owned by DNSCrypt, created by GitHub, verified in the GitHub Marketplace, or match one of the patterns: ShiftLeftSecurity/scan-action@*, goto-bus-stop/setup-zig@*, hecrj/setup-rust-action@*, roots/issue-closer@*, softprops/action-gh-release@*, zizmorecore/zizmor-action@*. All actions must also be pinned to a full-length commit SHA.