lgtm,codescanning
* Added `git` as a potentially-exploitable command interpreter for the purposes of the `go/command-injection` query. Because some of its options can cause it to execute an arbitrary command, unsanitized user data can be dangerous to include in its argument list. Such cases will now be flagged as an alert.

Add change-note for addition of `git` to the list of known interpreters for the go/command-injection query.
Add change-note for addition of `git` to the list of known interpreters for the go/command-injection query.
