The actions trufflesecurity/trufflehog@main and editorconfig-checker/action-editorconfig-checker@main are not allowed in hyperpolymath/im-docs because all actions must be pinned to a full-length commit SHA.