Update ql suites

Author: Alvaro Muñoz

ql/lib/codeql/actions/security/EnvPathInjectionQuery.qll

@@ -13,8 +13,9 @@ class EnvPathInjectionFromFileReadSink extends EnvPathInjectionSink {
       this.asExpr() = run.getScriptScalar() and
       step.getAFollowingStep() = run and
       writeToGitHubPath(run, value) and
-      // TODO: add support for other commands like `<`, `jq`, ...
-      value.regexpMatch(["\\$\\(", "`"] + ["cat\\s+", "<"] + ".*" + ["`", "\\)"])
+      // (eg: echo DATABASE_SHA=`yq '.creationMetadata.sha' codeql-database.yml` >> $GITHUB_ENV)
+      value
+          .regexpMatch(["\\$\\(", "`"] + ["cat\\s+", "<", "jq\\s+", "yq\\s+"] + ".*" + ["`", "\\)"])
     )
   }
 }

ql/lib/codeql/actions/security/EnvVarInjectionQuery.qll

@@ -26,8 +26,9 @@ class EnvVarInjectionFromFileReadSink extends EnvVarInjectionSink {
       step.getAFollowingStep() = run and
       writeToGitHubEnv(run, content) and
       extractVariableAndValue(content, _, value) and
-      // TODO: add support for other commands like `<`, `jq`, ...
-      value.regexpMatch(["\\$\\(", "`"] + ["cat\\s+", "<"] + ".*" + ["`", "\\)"])
+      // (eg: echo DATABASE_SHA=`yq '.creationMetadata.sha' codeql-database.yml` >> $GITHUB_ENV)
+      value
+          .regexpMatch(["\\$\\(", "`"] + ["cat\\s+", "<", "jq\\s+", "yq\\s+"] + ".*" + ["`", "\\)"])
     )
   }
 }

ql/src/Debug/partial.ql

@@ -5,6 +5,8 @@
  * @precision low
  * @problem.severity error
  * @id actions/test-dataflow
+ * @tags actions
+ *       debug
  */
 
 import actions

ql/src/codeql-suites/actions-all.qls

@@ -4,3 +4,7 @@
     kind:
       - problem
       - path-problem
+- exclude:
+    tags contain:
+      - debug
+      - model-generator

ql/src/codeql-suites/actions-code-scanning.qls

@@ -17,3 +17,5 @@
     tags contain:
       - experimental
       - testing
+      - debug
+      - model-generator