Adds a script to scan BenchmarkJava with Cognium and produce a SARIF
result file compatible with the BenchmarkUtils Cognium reader.

Install: npm install -g cognium

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

getBenchmarkVersion.sh runs mvn and pipes through grep -v '[INFO]', but
Maven's transfer progress lines ("Downloading from central: ...",
"Downloaded from central: ...") have no [INFO] prefix so they bypass
the filter. On a cold Maven cache these lines get captured into
benchmark_version, producing an invalid filename like:

  results/Benchmark_Downloading from central: https://...1.2-cognium-v1.6.9.sarif

The fix adds 2>/dev/null to silence stderr and pipes through
grep -E '^[0-9]+\.[0-9]' to accept only lines that start with digits —
the actual version string (e.g. 1.2). All Maven noise is discarded.

The second run worked because the local Maven cache was warm so no
download lines were emitted.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Bumps org.slf4j:slf4j-reload4j from 2.0.17 to 2.0.18.

---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-reload4j
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

…4j-slf4j-reload4j-2.0.18

Bump org.slf4j:slf4j-reload4j from 2.0.17 to 2.0.18

Add OpenTaint static analyzer support

Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/3.4.0...maven/3.5.0)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

…fplug.spotless-spotless-maven-plugin-3.5.0

Bump com.diffplug.spotless:spotless-maven-plugin from 3.4.0 to 3.5.0

Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 3.5.0 to 3.5.1.
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/3.5.0...maven/3.5.1)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.5.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 3.6.2 to 3.6.3.
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.6.2...enforcer-3.6.3)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

…fplug.spotless-spotless-maven-plugin-3.5.1

Bump com.diffplug.spotless:spotless-maven-plugin from 3.5.0 to 3.5.1

…che.maven.plugins-maven-enforcer-plugin-3.6.3

Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3

Bumps [org.apache.maven.plugins:maven-site-plugin](https://github.com/apache/maven-site-plugin) from 3.21.0 to 3.22.0.
- [Release notes](https://github.com/apache/maven-site-plugin/releases)
- [Commits](apache/maven-site-plugin@maven-site-plugin-3.21.0...maven-site-plugin-3.22.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-site-plugin
  dependency-version: 3.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

…che.maven.plugins-maven-site-plugin-3.22.0

Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0

Bumps [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) from 3.10.0 to 3.11.0.
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.10.0...maven-dependency-plugin-3.11.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-version: 3.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 3.5.1 to 3.6.0.
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/3.5.1...maven/3.6.0)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.5.5 to 3.5.6.
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.5...surefire-3.5.6)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

…che.maven.plugins-maven-dependency-plugin-3.11.0

Bump org.apache.maven.plugins:maven-dependency-plugin from 3.10.0 to 3.11.0

…fplug.spotless-spotless-maven-plugin-3.6.0

Bump com.diffplug.spotless:spotless-maven-plugin from 3.5.1 to 3.6.0

…che.maven.plugins-maven-surefire-plugin-3.5.6

Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6

Add runCognium.sh script for OWASP Benchmark scoring

Bumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) from 2.21.3 to 2.21.4.
- [Commits](https://github.com/FasterXML/jackson/commits)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.21.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

…terxml.jackson.core-jackson-databind-2.21.4

Bump com.fasterxml.jackson.core:jackson-databind from 2.21.3 to 2.21.4

Bumps `version.apache.api-ldap` from 2.1.7 to 2.1.8.

Updates `org.apache.directory.api:api-ldap-model` from 2.1.7 to 2.1.8

Updates `org.apache.directory.api:api-ldap-schema-data` from 2.1.7 to 2.1.8

---
updated-dependencies:
- dependency-name: org.apache.directory.api:api-ldap-model
  dependency-version: 2.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.directory.api:api-ldap-schema-data
  dependency-version: 2.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) from 2.21.4 to 2.22.0.
- [Commits](https://github.com/FasterXML/jackson/commits)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

….apache.api-ldap-2.1.8

Bump version.apache.api-ldap from 2.1.7 to 2.1.8

…terxml.jackson.core-jackson-databind-2.22.0

Bump com.fasterxml.jackson.core:jackson-databind from 2.21.4 to 2.22.0

Bumps [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.9.8.3 to 4.10.2.0.
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.9.8.3...spotbugs-maven-plugin-4.10.2.0)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

…hub.spotbugs-spotbugs-maven-plugin-4.10.2.0

Bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.8.3 to 4.10.2.0

Bumps [com.github.spotbugs:spotbugs](https://github.com/spotbugs/spotbugs) from 4.9.8 to 4.10.2.
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](spotbugs/spotbugs@4.9.8...4.10.2)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs
  dependency-version: 4.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

…hub.spotbugs-spotbugs-4.10.2

Bump com.github.spotbugs:spotbugs from 4.9.8 to 4.10.2

Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/3.6.0...maven/3.7.0)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

…fplug.spotless-spotless-maven-plugin-3.7.0

Bump com.diffplug.spotless:spotless-maven-plugin from 3.6.0 to 3.7.0

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

…s/actions/checkout-7

Bump actions/checkout from 6 to 7

Bumps [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core) from 5.4.2 to 5.4.3.
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.4.2...rel/v5.4.3)

---
updated-dependencies:
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

…che.httpcomponents.core5-httpcore5-5.4.3

Bump org.apache.httpcomponents.core5:httpcore5 from 5.4.2 to 5.4.3