actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11, ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736, actions/upload-artifact@694cdabd8bdb0f10b2cea11669e1bf5453eed0a6, and github/codeql-action/upload-sarif@b7bf0a3ed3ecfa44160715d7c442788f65f0f923 are not allowed to be used in zephyrproject-rtos/openthread. Actions in this workflow must be: within a repository owned by zephyrproject-rtos.