step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142, actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29, actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3, actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e, and codecov/codecov-action@5ecb98a3c6b747ed38dc09f787459979aebb39be are not allowed to be used in zephyrproject-rtos/openthread. Actions in this workflow must be: within a repository owned by zephyrproject-rtos.