Library used in Github Action causes false-positive

[haerter-tss]

Situation

We use the module "command-exists" in our Github Action. When a folder is scanned that has the same name as a command, the command-exists module declares it as command injection.

Wanted

This should not happen. Someone already raised an issue in the command-exists repository: Link but it came to no solution.