You might want to run actionlint and zizmor over your workflows, there are bunch of issues.

(See https://github.com/mozilla/neqo/blob/main/.github/workflows/actionlint.yml for how we run those as part of our CI always.)