[StepSecurity] Harden GibHub Actions, part 2

[marcalff]

Follow up after PR #3338
Part of open-telemetry/sig-security#87

Changes

Please provide a brief description of the changes here.

• Fix remaining github actions.

For significant contributions please make sure you have completed the following items:

• CHANGELOG.md updated for non-trivial changes
• Unit tests have been added
• Changes in public API reviewed

[netlify]

✅ Deploy Preview for opentelemetry-cpp-api-docs canceled.

Name	Link
🔨 Latest commit	0cf58fe
🔍 Latest deploy log	https://app.netlify.com/sites/opentelemetry-cpp-api-docs/deploys/67ee92c9eee35900081d9e35

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 89.56%. Comparing base (b6630ee) to head (0cf58fe).
Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #3340      +/-   ##
==========================================
+ Coverage   89.55%   89.56%   +0.02%     
==========================================
  Files         210      210              
  Lines        6502     6502              
==========================================
+ Hits         5822     5823       +1     
+ Misses        680      679       -1     

see 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.