Add InfraScan CI workflow for IaC security and cost auditing

[igor-soldev]

What

This PR introduces a new GitHub Actions workflow integrating InfraScan (soldevelo/infrascan@v1.0.8) into the hyperswitch-suite repository.

The workflow runs on every push and pull_request, performs a comprehensive Infrastructure as Code (IaC) scan, generates an HTML report, and uploads it as a GitHub Actions artifact for later review.

🔎 Web report:
https://infrascan.soldevelo.com/report/hyperswitch-suite-7e5a334f-4ac5-410c-9964-e4e90e0875a3

The scan evaluates Terraform-based infrastructure across:

• Security posture
• Cost optimization
• Infrastructure configuration quality and best practices

---

Why

The goal of this change is to introduce continuous Infrastructure as Code security and cost auditing directly into the CI/CD pipeline.

InfraScan enables early detection of:

• Infrastructure misconfigurations
• Cost inefficiencies and optimization opportunities
• Medium-severity security and compliance issues in Terraform code

This improves infrastructure visibility and supports a shift-left approach, reducing risk and improving maintainability before changes reach production.

The current scan results indicate a moderate number of findings, especially in IaC security (medium-severity issues), highlighting the value of automated and continuous infrastructure validation.

---

Key Scan Results (InfraScan)

• Repository: hyperswitch-suite
• Scanned: 2026-06-17 08:17:35 UTC
• Resources scanned: 471

Overall Infrastructure Health

• Grade: B (92%)
• Total findings: 314
  • 27 High severity
  • 279 Medium severity
  • 8 Low severity

Cost Optimization

• Grade: B (91.8%)
• Findings: 69
  • 27 High impact cost optimization opportunities
  • 34 Medium
  • 8 Low

IaC Security

• Grade: C (84.3%)
• Findings: 245 (Medium severity)
• Indicates a consistent set of infrastructure improvements needed across Terraform configurations.

Container Security

• Grade: A (100%)
• Findings: 0 vulnerabilities detected

[igor-soldev]

Hi team,

I wanted to quickly follow up on this PR, and share the latest updated InfraScan audit metrics for the hyperswitch-suite repository. The tool has identified concrete ways to reduce infrastructure budget by up to 12.8%.

The updated interactive web report is available here:
👉 View Full InfraScan Report

Here is the visual summary from the latest scan dashboard:

While our cost efficiency is looking solid at a 'B' grade, the report highlights room for improvement in IaC Security (Grade C with 245 medium violations). Integrating this pipeline check will serve as a continuous automated safeguard, flagging both budget leaks and security misconfigurations early on during code review.

All 3 CI status checks are passing successfully. Could a maintainer please review and approve the workflow?

Thank you!