Organizations can enforce that their repos use only actions that are within the repo, making the build more secure, controlled and auditable.