[WIP] refactor: resort the manifests for malware-detection and compliance

[xiangce]

• add canonical facts to persist collection
• resort the specs order

All Pull Requests:

Check all that apply:

• [x] Have you followed the guidelines in our Contributing document, including the instructions about commit messages?
• [x] No Sensitive Data in this change?
• [ ] Is this PR to correct an issue?
• [x] Is this PR an enhancement?

Complete Description of Additions/Changes:

Add your description here

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 77.05%. Comparing base (9e933da) to head (83f0a84).

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #4336   +/-   ##
=======================================
  Coverage   77.05%   77.05%           
=======================================
  Files         736      736           
  Lines       41363    41363           
  Branches     8787     8787           
=======================================
  Hits        31874    31874           
  Misses       8431     8431           
  Partials     1058     1058           

Flag	Coverage Δ
unittests	77.04% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.