Immutable actions support

[aegilops]

Support Immutable Actions, which have different Actions workflow log output.

This pull request enhances the auditing capabilities for GitHub Actions workflows by introducing support for immutable actions, including appropriate tests.

It also includes test configuration files.

Enhancements to GitHub Actions Auditing:

• audit_workflow_runs.js: Added support for immutable actions by including new fields immutable_version and digest in the createActionsRunResults function and updating the CSV header in the main function. [1] [2]
• audit_workflow_runs_utils.js: Refactored the searchForActionsLines function to parse both mutable and immutable actions using new regex patterns and logic for handling grouped log lines.

Test Coverage Improvements:

• audit_workflow_runs.test.js: Added a new test case to validate the extraction of immutable actions and their associated metadata.

Configuration Updates:

• test.json: Added sample configuration for auditing specific actions, including tj-actions/changed-files and reviewdog/*.
• test2.json: Added sample configuration for actions such as aquasecurity/trivy-action, actions/setup-node, and actions/checkout.

[Copilot]

Pull Request Overview

This PR adds support for immutable GitHub Actions workflows by enhancing the auditing system to parse and track immutable action metadata alongside existing mutable action support.

• Extends action parsing logic to handle immutable action groups with version, SHA, and digest information
• Updates data structures and CSV output format to include new immutable action fields
• Adds comprehensive test coverage for the new immutable action parsing functionality

Reviewed Changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
audit_workflow_runs.js	Updates createActionsRunResults function and CSV header to include immutable action fields
audit_workflow_runs_utils.js	Refactors searchForActionsLines to parse both mutable and immutable actions with new regex patterns
audit_workflow_runs.test.js	Adds test case validating extraction of immutable actions and their metadata
test.json	Adds sample configuration for tj-actions/changed-files and reviewdog actions
test2.json	Adds sample configuration for aquasecurity/trivy-action, actions/setup-node, and actions/checkout