Modify rule S5659: Add python-jose (APPSEC-1262) (#3399)

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

docs/header_names/allowed_framework_names.adoc

@@ -99,6 +99,7 @@
 * pyDes
 * PyJWT
 * python-jwt
+* python-jose
 // Docker
 * Wget
 // Cloudformation

rules/S5659/python/how-to-fix-it/python-jose.adoc

@@ -0,0 +1,36 @@
+== How to fix it in python-jose
+
+=== Code examples
+
+include::../../common/fix/code-rationale-decode.adoc[]
+
+==== Noncompliant code example
+
+[source,python,diff-id=111,diff-type=noncompliant]
+----
+from jose import jwt
+
+jwt.decode(token, None, options={"verify_signature": False}) # Noncompliant
+----
+
+==== Compliant solution
+
+By default, verification is enabled for the methods `decode` and `verify`.
+
+[source,python,diff-id=111,diff-type=compliant]
+----
+from jose import jwt
+
+jwt.decode(token, key, algorithms=["HS256"])
+----
+
+=== How does this work?
+
+include::../../common/fix/decode.adoc[]
+
+=== Going the extra mile
+
+include::../../common/extra-mile/key-storage.adoc[]
+
+include::../../common/extra-mile/key-rotation.adoc[]
+

rules/S5659/python/rule.adoc

@@ -12,6 +12,8 @@ include::how-to-fix-it/pyjwt.adoc[]
 
 include::how-to-fix-it/python-jwt.adoc[]
 
+include::how-to-fix-it/python-jose.adoc[]
+
 == Resources
 
 include::../common/resources/standards.adoc[]