Add KBs for actions

knowledge-base/actions/abhinavsingh/setup-bazel/action-security.yml

@@ -0,0 +1,2 @@
+name: "Setup Bazel"
+#Note: github token not used

knowledge-base/actions/actionshub/chef-delivery/action-security.yml

@@ -0,0 +1,2 @@
+name: "Chef Delivery Action"
+#Note: github token not used

knowledge-base/actions/eskatos/gradle-command-action/action-security.yml

@@ -0,0 +1,2 @@
+name: "Gradle Build Action"
+# no github token used

knowledge-base/actions/irongut/editrelease/action-security.yml

@@ -1,9 +1,10 @@
-name: 'Edit Release'
-# irongut/EditRelease
+name: "Edit Release"
 github-token:
   action-input:
-    input: token
-    is-default: false
+   input: token
+   is-default: false
   permissions:
-    contents: write
-    contents-reason: to edit release details
+   contents: write
+   contents-reason: to edit release details
+    #Reference: https://github.com/irongut/EditRelease/blob/9cca065cfb86c7e0e250a87b9cc0b5ffac06e4a2/src/EditRelease/Options.cs
+    # https://github.com/irongut/EditRelease/blob/9cca065cfb86c7e0e250a87b9cc0b5ffac06e4a2/src/EditRelease/Program.cs

knowledge-base/actions/pragatheeswarans/yarn-audit-action/action-security.yml

@@ -0,0 +1,9 @@
+name: "Yarn Audit"
+github-token:
+  action-input:
+    input: token
+    is-default: false
+  permissions:
+    issues: write
+    issues-reason: to create issue with security vulnerabilities
+    #Reference: https://github.com/pragatheeswarans/yarn-audit-action/blob/f3ab4c055f4b8f1db1b1ae0e32bab690c9050603/index.js