lgtm,codescanning
* The `js/sql-injection` query now recognizes graphql injections. 
  Affected packages are
    [@octokit/core](https://npmjs.com/package/@octokit/core),
    [@octokit/rest](https://npmjs.com/package/@octokit/rest),
    [@octokit/graphql](https://npmjs.com/package/@octokit/graphql),
    [@octokit/request](https://npmjs.com/package/@octokit/request), 
    [@actions/github](https://npmjs.com/package/@actions/github), and
    [graphql](https://npmjs.com/package/graphql)