Rb: more taint-steps for shell-command-construction
${workspace}
Ssa::WriteDefinition::getWriteAccess