Static misconfiguration scan of an infrastructure-as-code config: Terraform (plan JSON or HCL), Kubernetes / Helm, Docke

Static misconfiguration scan of an infrastructure-as-code config: Terraform (plan JSON or HCL), Kubernetes / Helm, Dockerfile, docker-compose or CloudFormation. Detects public storage, open security groups, unencrypted data at rest, over-broad IAM, privileged / root containers, host mounts and more. Returns a verdict (pass, caution, block), a 0-100 risk score and per-finding rule, severity, resource, location and fix hint. Security indicators, not a guarantee.