doc(SAST): include SAST scan in README