research(OS_scan): PoC of Openstack Scanner for Hardening Guide 4.5

[helen-hua]

Task Description
We need to have a policy violation check for hardening rule #4.5: "Ensure only approved Golden images are used in VM creation (compute) in the most efficient way" against the VM assets collected from SDAI Converged Cloud project.

We can start with hardcoding the 4.5 check in the code as policy-as-code language and tooling has not been defined yet.

Link to SDAI ticket for this task: Jira CLDSECCENTRAL-11

Acceptance Criteria:

• Return either a pass or fail result based on whether the image used to create VM is SAP compliant