STP configuring on EtherChannel
Whenever configuring STP related features such as BPDUGuard, RootGuard, LoopGuard, and BPDUFilter, you always apply them on the port-channel interfaces and not on the physical ports. The only exception is UDLD which is strictly a physical layer protection mechanism.
Links:
https://forum.networklessons.com/t/spanning-tree-rootguard/1144/31?u=lagapides
https://networklessons.com/spanning-tree/spanning-tree-loopguard-udld