lgtm,codescanning

• The js/sql-injection query now recognizes graphql injections. Affected packages are @octokit/core, @octokit/rest, @octokit/graphql, @octokit/request, @actions/github, and graphql