step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c and dependabot/fetch-metadata@dbb049abf0d677abbd7f7eee0375145b417fdd34 are not allowed to be used in btschwertfeger/python-kraken-sdk. Actions in this workflow must be: within a repository owned by btschwertfeger or matching the following: codecov/*, github/*, ossf/*, pre-commit/*, pypa/*.