ASVS scan of sling

[andrewmusselman]

Priority order from the PMC:

1. Core Sling
   https://github.com/apache/sling-org-apache-sling-api
   https://github.com/apache/sling-org-apache-sling-auth-core
   https://github.com/apache/sling-org-apache-sling-engine/
   https://github.com/apache/sling-org-apache-sling-resourceresolver
   https://github.com/apache/sling-org-apache-sling-scripting-spi
   https://github.com/apache/sling-org-apache-sling-scripting-core
   https://github.com/apache/sling-org-apache-sling-servlets-resolver
   https://github.com/apache/sling-org-apache-sling-servlets-get
   https://github.com/apache/sling-org-apache-sling-servlets-post
   https://github.com/apache/sling-org-apache-sling-xss
   https://github.com/apache/sling-org-apache-sling-jcr-resource
   https://github.com/apache/sling-org-apache-sling-jcr-base
   https://github.com/apache/sling-org-apache-sling-jcr-jackrabbit-base
   https://github.com/apache/sling-org-apache-sling-jcr-oak-server

2. Selected security-related modules
   https://github.com/apache/sling-org-apache-sling-auth-form
   https://github.com/apache/sling-org-apache-sling-auth-oauth-client
   https://github.com/apache/sling-org-apache-sling-commons-crypto
   https://github.com/apache/sling-org-apache-sling-commons-messaging-mail
   https://github.com/apache/sling-org-apache-sling-security