Enhance IaC CI: Checkov SARIF upload, Trivy IaC scan, workflow permissions, and pod securityContext#6

tukue merged 2 commits intomaintukue/InfraAsCodeWithCDK:mainfrom

codex/add-security-scanning-to-ci-pipeline-wt98u5tukue/InfraAsCodeWithCDK:codex/add-security-scanning-to-ci-pipeline-wt98u5Copy head branch name to clipboard