Secure workflows in pull request #1

[step-security]

Automated security improvements made to workflow files modified in #1 by Step Security. To incorporate these changes, merge this Pull Request into the original.

Actions can use the GITHUB_TOKEN by accessing it from the github.token context. You should therefore make sure that the GITHUB_TOKEN is granted the minimum required permissions - Security hardening for GitHub Actions

For bug reports, feature requests, and general feedback, please create an issue here