cover also script parts in github action

[tomersein]

today we cover only direct github action (parsing uses)
we want to be able to parse run | parts to get more information.

[tomersein]

we will need to find a way here how to protect from scripts injections (since we use regexes)
the issue is we do not cover today the parts in the ci who starts with run:
but it will might increase the risk