The action actions/upload-artifact@v4 is not allowed in badrap/docs.badrap.io because all actions must be from a repository owned by badrap, created by GitHub, verified in the GitHub Marketplace, or match one of the patterns: changesets/action@*, docker/*, google-github-actions/*, hashicorp/setup-terraform@*, pnpm/action-setup@*, tailscale/github-action@*. All actions must also be pinned to a full-length commit SHA.