Currently the path-filtering orb does a curl | sh to install the yq command. This adds to execution time, adds bandwidth, is insecure, and produces potentially non-reproducible results - for example it broke when using older python versions because the upstream repository started needing new python.

If we added yq to the base image, the curl | sh download wouldn't be needed, and a fairly common utility would be available to image users. jq is already included in the base image.