add Automatic security assessment tool

[berez23]

Although automatic security assessment tools do not guarantee 100 % secure code they assure a good security posture.
My proposal would be a small guide that provides info on how to integrate this tool in the development phase.

SAST - Static Application Security Testing

1. SAST IDE
2. SAST at runtime code and Container
3. SAST at CI code and Container

DAST: Dynamic Application Security Testing

1. SAST at runtime
2. SAST @ CI