docs: update tutorial to show the use of wildcard.

Signed-off-by: Demolus13 <[email protected]>

Author: Demolus13

docs/source/pages/tutorials/verify_with_existing_policy.rst

@@ -27,7 +27,7 @@ Run the ``malware-detection`` policy against a package URL:
     ./run_macaron.sh verify-policy \
       --database output/macaron.db \
       --existing-policy malware-detection \
-      --package-url "pkg:pypi/django"
+      --package-url "pkg:pypi/django@5.0.6"
 
 The result of this command should show that the policy succeeds with a zero exit code (if a policy fails to pass, Macaron returns a none-zero error code):
 
@@ -44,6 +44,39 @@ The result of this command should show that the policy succeeds with a zero exit
     Verification Summary Attestation  output/vsa.intoto.jsonl
     Decode and Inspect the Content    cat output/vsa.intoto.jsonl | jq -r '.payload' | base64 -d | jq
 
+Run the ``malware-detection`` policy using wildcard:
+
+.. code-block:: shell
+
+  ./run_macaron.sh analyze -purl pkg:pypi/[email protected]
+  ./run_macaron.sh analyze -purl pkg:pypi/[email protected]
+
+.. note:: By default, Macaron clones the repositories and creates output files under the ``output`` directory. To understand the structure of this directory please see :ref:`Output Files Guide <output_files_guide>`.
+
+.. code-block:: shell
+
+    ./run_macaron.sh verify-policy \
+      --database output/macaron.db \
+      --existing-policy malware-detection \
+      --package-url "pkg:pypi/django@*"
+
+It uses the wildcard '*' to checks for components satisfying the expression "pkg:pypi/django@*".
+The result of this command should show that the policy succeeds with a zero exit code (if a policy fails to pass, Macaron returns a none-zero error code):
+
+.. code-block:: shell
+
+    Components Satisfy Policy
+    1    pkg:pypi/[email protected]  check-component
+    1    pkg:pypi/[email protected]  check-component
+
+    Components Violate Policy   None
+
+    Passed Policies  check-component
+    Failed Policies  None
+    Policy Report    output/policy_report.json
+    Verification Summary Attestation  output/vsa.intoto.jsonl
+    Decode and Inspect the Content    cat output/vsa.intoto.jsonl | jq -r '.payload' | base64 -d | jq
+
 -----------------
 Related tutorials
 -----------------