Lockdown untrusted workflows

Merge branch 'develop' into dependabot/pip/docs/mkdocs-material-9.7.0 #3401

Sign in to view logs

Run time

Learn about OS pricing on GitHub Actions

Job	Run time
Harden Security	5s
	5s