Static analysis for GitHub Actions (and more)