ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 is not allowed to be used in fidelity-contributions/open-telemetry-opentelemetry-collector. Actions in this workflow must be: within a repository owned by fidelity-contributions or matching the following: actions/*, github/codeql-action/*.