Cherry pick/using secure repo token

[vamshi-stepsecurity]

No description provided.

[codecov]

Codecov Report

❌ Patch coverage is 65.62500% with 11 lines in your changes missing coverage. Please review.
✅ Project coverage is 67.30%. Comparing base (06f4c25) to head (1922e6e).

Files with missing lines	Patch %	Lines
remediation/workflow/secureworkflow.go	44.44%	4 Missing and 1 partial ⚠️
remediation/workflow/pin/pinactions.go	80.00%	3 Missing and 1 partial ⚠️
remediation/workflow/hardenrunner/addaction.go	33.33%	1 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2548      +/-   ##
==========================================
- Coverage   67.39%   67.30%   -0.10%     
==========================================
  Files          19       19              
  Lines        1546     1563      +17     
==========================================
+ Hits         1042     1052      +10     
- Misses        389      393       +4     
- Partials      115      118       +3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.