Merge pull request #127 from step-security-bot/stepsecurity_remediation_1687641140

[StepSecurity] ci: Harden GitHub Actions