A static analysis tool for GitHub Actions