The actions actions/checkout@v2 and norio-nomura/action-swiftlint@3.2.1 are not allowed in nextcloud/NextcloudKit because all actions must be pinned to a full-length commit SHA.