Add more reference benchmarks

[misonijnik]

• [ ] WebGoat
• [ ] vuln-flask-web-app
• [ ] WebGoat .NET
• [x] #4
• [ ] FlowBot
• [ ] SecurityShepherd
• [ ] #7
• [ ] Damn Small Vulnerable Web
• [ ] IssueBlot
• [ ] go-test-bench
• [ ] vulnerable-spring-boot-application
• [ ] CodeQL tests
• [ ] gosec tests
• [ ] go-sec-code
• [ ] Go Vulnerable Web Application
• [ ] swiss-cheese
• [ ] java-web-apps
• [ ] #6
• [ ] ant-application-security-testing-benchmark
• [ ] grails-javamelody-sample-app
• [ ] #20

[misonijnik]

Benchmark	Lang	Kind
WebGoat	Java	web application
vuln-flask-web-app	Python	web application
WebGoat .NET	C#	web application
Juliet C#	C#	synthetic
FlowBot	C#	synthetic
SecurityShepherd	Java	web application
skf-labs	Python, Java	synthetic
Damn Small Vulnerable Web	Python	web application
IssueBlot	C#	web application
go-test-bench	Go	web application
vulnerable-spring-boot-application	Java	web application
CodeQL tests	Java	synthetic
gosec tests	Go	synthetic
go-sec-code	Go	synthetic
Go Vulnerable Web Application	Go	synthetic
swiss-cheese	Python	synthetic
java-web-apps	Java	web application
sast-rules	Java, C#, Python, Go	synthetic
ant-application-security-testing-benchmark	Java	synthetic
grails-javamelody-sample-app	Java	web application
Juliet Java	Java	synthetic

[misonijnik]

Here is the ground truth for some of the benchmarks above.