add change-note

erik-krogh · erik-krogh · commit d8cc82bdb1f7 · 2022-05-04T16:14:59.000+02:00
diff --git a/javascript/ql/src/change-notes/2022-05-03-actions-injection.md b/javascript/ql/src/change-notes/2022-05-03-actions-injection.md
@@ -0,0 +1,6 @@
+---
+category: newQuery
+---
+* The `js/actions/injection` query has been added. It highlights GitHub Actions workflows that may allow an 
+  attacker to execute arbitrary code in the workflow.
+  The query previously existed an experimental query.
