Improve event context sources + test

Author: Alvaro Muñoz

ql/lib/codeql/actions/dataflow/FlowSources.qll

@@ -200,7 +200,7 @@ class GitHubEventCtxSource extends RemoteFlowSource {
         or
         regexp = pathEvent() and flag = "filename"
       ) and
-      normalizeExpr(context).regexpMatch("(?i).*" + wrapRegexp(regexp) + ".*")
+      normalizeExpr(context).regexpMatch("(?i)\\s*" + wrapRegexp(regexp) + ".*")
     )
   }
 

ql/test/query-tests/Security/CWE-094/.github/workflows/test6.yml

@@ -0,0 +1,16 @@
+name: Test
+on:
+  issue_comment:
+
+permissions:
+  contents: write
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - run: |
+          {
+            echo "recreate_vm=${{ contains(github.event.comment.body, 'recreate-vm') }}"
+          } >> $GITHUB_OUTPUT
+