step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6, actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29, github/codeql-action/init@d39d31e687223d841ef683f52467bd88e9b21c14, and github/codeql-action/analyze@d39d31e687223d841ef683f52467bd88e9b21c14 are not allowed to be used in zephyrproject-rtos/openthread. Actions in this workflow must be: within a repository owned by zephyrproject-rtos.