actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11, ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736, actions/upload-artifact@694cdabd8bdb0f10b2cea11669e1bf5453eed0a6, and github/codeql-action/upload-sarif@74483a38d39275f33fcff5f35b679b5ca4a26a99 are not allowed to be used in zephyrproject-rtos/openthread. Actions in this workflow must be: within a repository owned by zephyrproject-rtos.