...

• This restriction does not apply to workflows triggered by pull_request_target or issue_comment
• This restriction does not protect against compromised committer accounts
• When using the 'checkout' action to check out the relevant PR, do not specify the ref  as "refs/pull/${{ github.event.number }}/merge" or "github.event.pull_request.head.ref": the PR may have been updated since the workflow was approved. Instead, leave the ref  empty to use the code associated with the event that triggered the build (which should what it looked like when it was approved), or use the exact commit hash.

Action allowlisting

The ASF GitHub org only allows action versions that have been added to the org-wide allowlist. You're invited to add actions you'd like to use to this allowlist, and review new versions as they appear. 

Default GITHUB_TOKEN permissions

...