Add ShiftLeft build rules - #1

Checking analysis of application shiftleft-python-demo against 3 build rules.

Using sl version 0.9.3763 (206819b5f68088c685bb1d716748100d2887bccb).

Checking findings on scan 1.

Results per rule:

• Allow no critical findings: FAIL
  (9 matched vulnerabilities; configured threshold is 0).

  First 5 findings:

  ID	CVSS	Rating	Title
  12	10.0	critical	Deserialization: Use of Unsafe Library Which can Execute Arbitrary Code in deserialized_descr
  1	9.0	critical	Remote Code Execution: Command Injection Through Attacker-controlled Data in actions.py
  4	9.0	critical	Directory Traversal: Attacker-controlled Data Used in File Path in actions.py
  7	9.0	critical	SQL Injection: Attacker-controlled Data Used in SQL Query in auth.py
  8	9.0	critical	SQL Injection: Attacker-controlled Data Used in SQL Query in users.py

  Severity rating	Count
  Critical	9
  High	0
  Medium	0
  Low	0

  Finding Type	Count
  Vuln	4
  Container	4
  Security_issue	1

  Category	Count
  SQL Injection	2
  Remote Code Execution	1
  Directory Traversal	1
  Deserialization	1

  CVE	Count
  CVE-2022-37434	1
  CVE-2022-28391	1
  CVE-2021-36159	1
  CVE-2021-3711	1

  OWASP 2021 Category	Count
  A03-Injection	3
  A08-Software-And-Data-Integrity-Failures	1
  A01-Broken-Access-Control	1

• Allow one OSS or container finding: FAIL
  (54 matched vulnerabilities; configured threshold is 1).

  First 5 findings:

  ID	CVSS	Rating	CVE	Title
  17	9.0	critical	CVE-2021-36159	libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mod…
  30	9.0	critical	CVE-2022-28391	CVE-2022-28391 affecting package busybox for versions less than 1.36.1-3. A patched version of the package is available.
  38	9.0	critical	CVE-2021-3711	In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this fun…
  52	9.0	critical	CVE-2022-37434	zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applicati…
  55	8.6	high	CVE-2016-10745	In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.

  Severity rating	Count
  Critical	4
  High	33
  Medium	15
  Low	2

  Finding Type	Count
  Container	37
  Oss_vuln	17

• Allow no reachable OSS vulnerability: pass
  (0 matched vulnerabilities; configured threshold is 0).

2 rules failed.