step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6, actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29, actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e, codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673, and actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b are not allowed to be used in zephyrproject-rtos/openthread. Actions in this workflow must be: within a repository owned by zephyrproject-rtos.