The actions actions/checkout@v6, tj-actions/changed-files@v47, and davidanson/markdownlint-cli2-action@v23 are not allowed in IntimateMerger/prebid.github.io because all actions must be pinned to a full-length commit SHA.