Update shiftleft.yml

[nishfath]

No description provided.

[github-actions]

Checking analysis of application java-sec-code-test against 1 build rules.

Using sl version 0.9.3220 (feb27a4e847a651a8bb46636d00a78f324dd62e3).

Checking findings on scan 9.

Results per rule:

• report: FAIL
  (557 matched vulnerabilities; configured threshold is 0).

  First 5 findings:

  ID	CVSS	Rating	CVE	Title
  255	10.0	critical	CVE-2018-14721	FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to b…
  547	10.0	critical	CVE-2021-44228	Log4j versions prior to 2.16.0 are subject to a remote code execution vulnerability via the ldap JNDI parser.
  554	10.0	critical	CVE-2021-44228	Log4j versions prior to 2.16.0 are subject to a remote code execution vulnerability via the ldap JNDI parser.
  661	10.0	critical	GMS-2022-559	Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in org.springframework:spring-core.
  663	10.0	critical	GMS-2022-558	Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in org.springframework:spring-beans.

  Severity rating	Count
  Critical	93
  High	205
  Medium	149
  Low	108

  Finding Type	Count
  Oss_vuln	338
  Vuln	217
  Secret	2

  OWASP 2021 Category	Count
  A09-Security-Logging-And-Monitoring-Failures	53
  A03-Injection	52
  A01-Broken-Access-Control	48
  A05-Security-Misconfiguration	32
  A10-Server-Side-Request-Forgery-(Ssrf)	25
  A08-Software-And-Data-Integrity-Failures	5
  A07-Identification-And-Authentication-Failures	1
  A02-Cryptographic-Failures	1

1 rule failed.