update list of OWASP checks and upgrade spring boot

Motivation:

Some reported vulnerabilities of the dependencies by OWASP make
the pipeline broken.

Modification:

- upgrade spring boot starter parent version from 2.3.5.RELEASE
    to 2.3.12.RELEASE
- update list of OWASP check and supress some false positive
    alarms

Result:

Build pipeline succeeds.

Target: master
5 jobs for master in 4 minutes and 51 seconds (queued for 1 second)