Remove false positive injection sink models for docker/build-push-action and step-security/harden-runner
#21574
+4
−12