"github.event.head_commit.message" is potentially untrusted. avoid using it directly in inline scripts. instead, pass it through an environment variable. see https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions for more details

❌ [actionlint] The command ran successfully and some problem was found (found 1 errors, linted 33 files), exit code: 1