Static analysis for GitHub Actions