ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186 is not allowed to be used in zendesk/codecov-action. Actions in this workflow must be: within a repository that belongs to your Enterprise account or matching the following: Frederick888/gh-ph@*, JamesIves/github-pages-deploy-action@*, KengoTODA/actions-setup-docker-compose@*, StyraInc/setup-regal@*, TimonVS/pr-labeler-action@*, Wandalen/wretry.action@*, actions/*, amannn/action-semantic-pull-request@*, andstor/file-existence-action@*, arduino/actions@*, arduino/setup-protoc@*, arduino/setup-task@*, astral-sh/setup-uv@*, atlassian/gajira-cli@*, atlassian/gajira-comment@*, atlassian/gajira-create@*, atlassian/gajira-login@*, aws-actions/configure-aws-credentials@*, bats-core/bats-action@*, bazel-contrib/setup-bazel@*, browser-actions/setup-chrome@*, browserstack/github-actions/setup-env@*, browserstack/github-actions/setup-local@*, bufbuild/buf-action@*, bufbuild/buf-breaking-action@*, bufbuild/buf-lint-action@*, bufbuild...