github/dependabot-action@main is not allowed to be used in juju4/ansible-harden. Actions in this workflow must be: within a repository owned by juju4 or matching the following: actions/checkout@*, actions/setup-python@*, codespell-project/actions-codespell@*, gitleaks/gitleaks-action@*, robertdebock/galaxy-action@*, trufflesecurity/trufflehog@*.