fix: allow process.env in ignores

Fixes conventional-changelog#4281

Author: SpenserJ

@commitlint/is-ignored/src/is-ignored.test.ts

@@ -256,6 +256,7 @@ test('should not throw error for custom ignore functions without security risks'
 		'function(commit) { return commit.length < 10 && commit.includes("some"); }',
 		'function(commit) { return commit.length < 10 || commit.includes("fetch"); }',
 		'function(commit) { return commit.includes("exec"); }',
+		'function(commit) { return !process.env.CI && /^wip\b/.test(commit); }',
 	];
 
 	safePatterns.forEach((fnString) => {

@commitlint/is-ignored/src/validate-ignore-func.ts

@@ -5,7 +5,7 @@ export function validateIgnoreFunction(fn: Matcher) {
 
 	// Check for dangerous patterns
 	const dangerousPattern =
-		/(?:process|require|import|eval|fetch|XMLHttpRequest|fs|child_process)(?:\s*\.|\s*\()|(?:exec|execFile|spawn)\s*\(/;
+		/(?:process(?!\.env)|require|import|eval|fetch|XMLHttpRequest|fs|child_process)(?:\s*\.|\s*\()|(?:exec|execFile|spawn)\s*\(/;
 	if (dangerousPattern.test(fnString)) {
 		// Find which pattern matched for a more specific error message
 		const match = fnString.match(dangerousPattern);