There are some third party actions in 'tests.yml' that need to be updated to the commithash per new NCAR-wide guidance on GitHub whitelisting.
@sherimickelson are you planning on doing this? (I see you've contributed to this repository, yet I received an email about it from the github-admins).