github_actions in /. for step-security/harden-runner, codecov/codecov-action, github/codeql-action, actions/download-artifact, ossf/scorecard-action - Update #979836189 #118