Create infrascan.yml

[igor-soldev]

Description

This PR adds an automated InfraScan GitHub Actions workflow to continuously analyze infrastructure configuration for security, cost optimization, and Terraform best practices.

Changes introduced

• Added .github/workflows/infrascan.yml

• Configured InfraScan execution on:

  • push
  • pull_request

• Added automated HTML report generation

• Added workflow artifact upload for generated reports with 14-day retention

The workflow enables continuous infrastructure auditing and helps surface:

• AWS cost optimization opportunities
• Terraform configuration improvements
• Kubernetes security best practices
• Infrastructure security findings

Closes #1550 - A few Terraform tweaks for AWS

Notes

This introduces automated infrastructure scanning directly into the CI pipeline, making it easier to identify infrastructure-related risks and optimization opportunities during development and code review.

---

Summary by cubic

Adds an InfraScan GitHub Actions workflow to audit infrastructure for security, cost, and best practices. Runs on every push and PR, generates an HTML report, uploads it as an artifact, and supports #1550 by surfacing AWS cost and Terraform findings in CI.

• New Features
  • Add .github/workflows/infrascan.yml using soldevelo/infrascan@v1.0.6 with scanner: comprehensive.
  • Output HTML report to infrascan-reports/report.html.
  • Upload report via actions/upload-artifact@v4 with 14-day retention.

^{Written for commit 71afaad. Summary will update on new commits.}

Review in cubic