Merge pull request #13511 from tspascoal/patch-1

JS: Single quote was preventing the shell from expanding the BODY variable in Expression injection in Actions example

Author: erik-krogh

javascript/ql/src/Security/CWE-094/examples/comment_issue_good.yml

@@ -7,4 +7,4 @@ jobs:
     - env:
         BODY: ${{ github.event.issue.body }}
       run: |
-        echo '$BODY'
+        echo "$BODY"