* Check that actions specify hashes instead of allowlist * Fixes for unhashed version * Update actions-workflows.js