oras-project/setup-oras@v1 is not allowed to be used in gardenlinux/glvd-contrib. Actions in this workflow must be: within a repository that belongs to your Enterprise account, created by GitHub, verified in the GitHub Marketplace, or matching the following: aws-actions/configure-aws-credentials@*, azure/login@*, gardenlinux/workflow-telemetry-action@*, google-github-actions/auth@*, pmeier/pytest-results-action@*, redhat-plumbers-in-action/differential-shellcheck@*, opentofu/setup-opentofu@*, gardenlinux/*, psf/black@stable, peaceiris/actions-gh-pages@v3.