step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6, actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29, github/codeql-action/init@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a, and github/codeql-action/analyze@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a are not allowed to be used in zephyrproject-rtos/openthread. Actions in this workflow must be: within a repository owned by zephyrproject-rtos.