feat: add sample policies

Signed-off-by: Demolus13 <[email protected]>

Author: Demolus13

src/macaron/resources/policies/datalog/check-github-actions.dl.template

@@ -0,0 +1,8 @@
+#include "prelude.dl"
+
+Policy("github_actions_vulns", component_id, "GitHub Actions Vulnerability Detection") :-
+  check_passed(component_id, "mcn_githubactions_vulnerabilities_1").
+
+apply_policy_to("github_actions_vulns", component_id) :-
+  is_component(component_id, purl),
+  match("<PACKAGE_PURL>@.*", purl).

src/macaron/resources/policies/datalog/malware-detection-dependencies.dl.template

@@ -0,0 +1,10 @@
+#include "prelude.dl"
+
+Policy("check-dependencies", component_id, "Check the dependencies of component.") :-
+  transitive_dependency(component_id, dependency),
+  check_passed(component_id, "mcn_detect_malicious_metadata_1"),
+  check_passed(dependency, "mcn_detect_malicious_metadata_1").
+
+apply_policy_to("check-dependencies", component_id) :-
+    is_component(component_id, purl),
+    match("<PACKAGE_PURL>@.*", purl).

src/macaron/resources/policies/datalog/malware-detection.dl.template

@@ -0,0 +1,9 @@
+#include "prelude.dl"
+
+Policy("check-component", component_id, "Check component artifacts.") :-
+    check_passed(component_id, "mcn_detect_malicious_metadata_1").
+
+
+apply_policy_to("check-component", component_id) :-
+    is_component(component_id, purl),
+    match("<PACKAGE_PURL>@.*", purl).