category minorAnalysis The first argument of Client.Query in cloud.google.com/go/bigquery is now recognized as a SQL injection sink.