step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423, actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11, actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce, actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a, codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d, and 1 other action are not allowed to be used in zephyrproject-rtos/openthread. Actions in this workflow must be: within a repository owned by zephyrproject-rtos.