https://ones.com/blog/knowledge/iac-scanning-enhances-devops-security/