Is there a tool that’s easily integrated into gitlab ci that “scans” terraform files for syntax, bugs, etc - similar to the other SAST tools (semgrep, bandit, etc)? Haven’t seen anything for IaC scanning in relation to yaml and tf files.

Hi,

For example tflint. For YAML files there is yamllint