chore: add powertools actions to allow list until releases are done

Signed-off-by: heitorlessa <[email protected]>

Author: heitorlessa

.github/workflows/on_schedule_monthly_roadmap_reminder.yml

@@ -15,6 +15,8 @@ jobs:
             contents: read
             pull-requests: read
             issues: write  # create monthly roadmap report
-        uses: aws-powertools/actions/.github/workflows/monthly_roadmap_reminder.yml@dd7035996f1813dbc50fe78e523d4c2a074258a9
+
+        # setting to `@main` until we have releases and governance installed
+        uses: aws-powertools/actions/.github/workflows/monthly_roadmap_reminder.yml@main
         secrets:
             token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/secure_workflows.yml

@@ -34,4 +34,6 @@ jobs:
       - name: Ensure 3rd party workflows have SHA pinned
         uses: zgosalvez/github-actions-ensure-sha-pinned-actions@ba37328d4ea95eaf8b3bd6c6cef308f709a5f2ec # v3.0.3
         with:
-          allowlist: slsa-framework/slsa-github-generator
+          allowlist: |
+            slsa-framework/slsa-github-generator
+            aws-powertools/actions