The actions trufflesecurity/trufflehog@main and editorconfig-checker/action-editorconfig-checker@main are not allowed in hyperpolymath/polysafe-gitfixer because all actions must be pinned to a full-length commit SHA.