Add more reference benchmarks

[misonijnik]

• WebGoat
• vuln-flask-web-app
• WebGoat .NET
• Add Juliet C# benchmark #4
• Add FlowBot benchmark #22
• SecurityShepherd
• Add skf-labs Python benchmark #7
• Damn Small Vulnerable Web
• IssueBlot
• Add go-test-bench #43
• vulnerable-spring-boot-application
• CodeQL tests
• gosec tests
• Add go-sec-code #44
• Go Vulnerable Web Application
• swiss-cheese
• java-web-apps
• Add sast-rules benchmarks #6
• ant-application-security-testing-benchmark
• grails-javamelody-sample-app
• Add Juliet Java benchmark #20

[misonijnik]

Benchmark	Lang	Kind
WebGoat	Java	web application
vuln-flask-web-app	Python	web application
WebGoat .NET	C#	web application
Juliet C#	C#	synthetic
FlowBot	C#	synthetic
SecurityShepherd	Java	web application
skf-labs	Python, Java	synthetic
Damn Small Vulnerable Web	Python	web application
IssueBlot	C#	web application
go-test-bench	Go	web application
vulnerable-spring-boot-application	Java	web application
CodeQL tests	Java	synthetic
gosec tests	Go	synthetic
go-sec-code	Go	synthetic
Go Vulnerable Web Application	Go	synthetic
swiss-cheese	Python	synthetic
java-web-apps	Java	web application
sast-rules	Java, C#, Python, Go	synthetic
ant-application-security-testing-benchmark	Java	synthetic
grails-javamelody-sample-app	Java	web application
Juliet Java	Java	synthetic

[misonijnik]

Here is the ground truth for some of the benchmarks above.