The actions github/codeql-action/init@v4 and github/codeql-action/analyze@v4 are not allowed in taiki-e/cargo-hack because all actions must be from a repository owned by taiki-e or match one of the patterns: actions/cache@*, actions/upload-artifact@*, github/dependabot-action@*, peter-evans/create-pull-request@*, rust-lang/crates-io-auth-action@*.