chore: harden runner

[npalm]

No description provided.

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	6		0	0.11s
✅ EDITORCONFIG	editorconfig-checker	6		0	0.05s
✅ REPOSITORY	gitleaks	yes		no	1.57s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	grype	yes		no	13.69s
✅ REPOSITORY	secretlint	yes		no	1.28s
✅ REPOSITORY	trivy	yes		no	5.91s
✅ REPOSITORY	trivy-sbom	yes		no	2.44s
✅ REPOSITORY	trufflehog	yes		no	4.84s
✅ SPELL	cspell	7		0	3.06s
✅ SPELL	lychee	6		0	0.21s
✅ YAML	prettier	6	0	0	1.01s
✅ YAML	v8r	6		0	4.98s
✅ YAML	yamllint	6		0	0.62s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by