Lockdown untrusted workflows

Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/develop/… #3705

Sign in to view logs

Run time

Learn about OS pricing on GitHub Actions

Job	Run time
Harden Security	6s
	6s