step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142, actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11, github/codeql-action/init@b7bf0a3ed3ecfa44160715d7c442788f65f0f923, and github/codeql-action/analyze@b7bf0a3ed3ecfa44160715d7c442788f65f0f923 are not allowed to be used in zephyrproject-rtos/openthread. Actions in this workflow must be: within a repository owned by zephyrproject-rtos.