step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4, actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11, actions/upload-artifact@694cdabd8bdb0f10b2cea11669e1bf5453eed0a6, actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935, and codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d are not allowed to be used in zephyrproject-rtos/openthread. Actions in this workflow must be: within a repository owned by zephyrproject-rtos.