Security Scanning and Compliance Checks

[rbilleci]

• Integrate static analysis tools for Terraform (e.g., tfsec, Checkov)
• Configure container vulnerability scanning
• Use Terraform compliance tools (e.g., Sentinel, Open Policy Agent) for policy enforcement.
• Review IAM roles and security group rules for least privilege and proper segmentation.
• Automate security tests to run on every pull request.