Add change notes and test workflow file.

actions/ql/lib/change-notes/2025-07-08.md

@@ -0,0 +1,4 @@
+---
+category: fix
+---
+* The `actions/artifact-poisoning/critical` and `actions/artifact-poisoning/medium` queries  now exclude artifacts downloaded to `$[{ runner.temp }}` in addition to `/tmp`.

actions/ql/test/query-tests/Security/CWE-829/.github/workflows/artifactpoison93.yml

@@ -0,0 +1,22 @@
+name: Secure Workflow
+
+on:
+  workflow_run:
+    workflows: ["Prev"]
+    types:
+      - completed
+
+jobs:
+  Download:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - run: mkdir -p ${{ runner.temp }}/artifacts/
+      - uses: dawidd6/action-download-artifact@v2
+        with:
+          name: pr_number
+          path: ${{ runner.temp }}/artifacts/
+
+      - name: Run command
+        run: |
+          sh cmd.sh