step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde, actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29, actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3, actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e, and codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 are not allowed to be used in zephyrproject-rtos/openthread. Actions in this workflow must be: within a repository owned by zephyrproject-rtos.