csfilter-kfp: fix an over-quoted regex

... which prevented empty lines in `exlude-paths.txt` from being
skipped.

Resolves: https://issues.redhat.com/browse/OSH-755

src/csfilter-kfp

@@ -113,7 +113,7 @@ def construct_path_filter(args):
     cmd += '  re=\n'
     cmd += '  while read line; do\n'
     cmd += '    re="${re}|(${line})"\n'
-    cmd += '  done < <(grep -Esv "^(#|\\\\$)" "$ep")\n'
+    cmd += '  done < <(grep -Esv \'^(#|$)\' "$ep")\n'
     cmd += '  if test -n "$re"; then\n'
     cmd += '    csgrep --mode=json --invert-match --path="${re#|}"\n'
     cmd += '  else\n'

tests/csfilter-kfp/0002-stdout.txt

@@ -13,7 +13,7 @@ path_filter() {
   re=
   while read line; do
     re="${re}|(${line})"
-  done < <(grep -Esv "^(#|\\$)" "$ep")
+  done < <(grep -Esv '^(#|$)' "$ep")
   if test -n "$re"; then
     csgrep --mode=json --invert-match --path="${re#|}"
   else

tests/csfilter-kfp/0004-args.txt

@@ -0,0 +1 @@
+--kfp-dir "$PROJECT_ROOT/tests/csfilter-kfp/0004-kfp" --project-nvr WALinuxAgent-2.7.0.6-8.el8_8

tests/csfilter-kfp/0004-kfp/WALinuxAgent/exclude-paths.txt

@@ -0,0 +1,4 @@
+
+WALinuxAgent[^/]*/dcr/.*
+# dcr' is a testing pipeline for WALA and it is packaged by an oversight, the code is not used. It was removed in the current upstream so this will be gone with WALA rebase.
+

tests/csfilter-kfp/0004-kfp/WALinuxAgent/ignore.err

@@ -0,0 +1,10 @@
+
+Error: SNYK_CODE_WARNING (CWE-547):
+WALinuxAgent-2.7.0.6/azurelinuxagent/common/utils/cryptutil.py:33:1: error[python/HardcodedNonCryptoSecret]: Avoid hardcoding values that are meant to be secret. Found a hardcoded string used in here.
+#   31|   
+#   32|   
+#   33|-> DECRYPT_SECRET_CMD = "{0} cms -decrypt -inform DER -inkey {1} -in /dev/stdin"
+#   34|   
+#   35|
+# DECRYPT_SECRET_CMD is not a hardcoded secret, it is a openssl command template, there's nothing secret in it.
+