Enhance auditpol workflow to include WELA integration and upload artifacts

Author: fukusuket

.github/workflows/check-auditpol.yml

@@ -18,6 +18,13 @@ jobs:
           auditpol /get /category:* | Out-File -FilePath $auditFile -Encoding utf8
           Get-Content $auditFile | Write-Host
 
+      - name: Upload auditpol artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: auditpol-${{ matrix.os }}-${{ github.run_number }}
+          path: AuditpolOutput-${{ matrix.os }}.txt
+          retention-days: 10
+
       - name: Run registry check script
         shell: pwsh
         run: |
@@ -64,16 +71,49 @@ jobs:
           $results | Export-Csv -Path $regFile -NoTypeInformation -Encoding UTF8
           $results | Format-Table -AutoSize
 
-      - name: Upload auditpol artifact
+      - name: Upload CSV artifact
         uses: actions/upload-artifact@v4
         with:
-          name: auditpol-${{ matrix.os }}-${{ github.run_number }}
-          path: AuditpolOutput-${{ matrix.os }}.txt
+          name: registry-settings-${{ matrix.os }}-${{ github.run_number }}
+          path: RegistrySettings-${{ matrix.os }}.csv
           retention-days: 10
 
-      - name: Upload CSV artifact
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Checkout WELA repository
+        uses: actions/checkout@v4
+        with:
+          repository: Yamato-Security/WELA
+          path: WELA
+
+      - name: Run WELA.ps1 audit-settings
+        run: |
+          cd WELA
+          ./WELA.ps1 audit-settings -Baseline YamatoSecurity
+
+      - name: Run WELA.ps1 audit-filesize
+        run: |
+          cd WELA
+          ./WELA.ps1 audit-filesize -Baseline YamatoSecurity
+
+      - name: Rename WELA output files
+        run: |
+          $os = '${{ matrix.os }}'
+          Get-ChildItem -Path WELA -Filter *.csv | ForEach-Object {
+              Rename-Item -Path $_.FullName -NewName "$os`_$($_.Name)"
+          }
+          Get-ChildItem -Path WELA -Filter *.json | ForEach-Object {
+              Rename-Item -Path $_.FullName -NewName "$os`_$($_.Name)"
+          }
+
+      - name: Upload WELA artifacts
         uses: actions/upload-artifact@v4
         with:
-          name: registry-settings-${{ matrix.os }}-${{ github.run_number }}
-          path: RegistrySettings-${{ matrix.os }}.csv
+          name: wela-reports-${{ matrix.os }}-${{ github.run_number }}
+          path: |
+            WELA/${{ matrix.os }}_*.csv
+            WELA/${{ matrix.os }}_*.json
           retention-days: 10