From 828264fa5e406c2c31addf5731855a931f4b243f Mon Sep 17 00:00:00 2001
From: Tukue Gebregergis <tukue.geb@gmail.com>
Date: Thu, 12 Jun 2025 14:50:59 +0200
Subject: [PATCH] adding github action CI/CD pipeline

---
 README.md | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/README.md b/README.md
index 2c23b18..e3b7c61 100644
--- a/README.md
+++ b/README.md
@@ -328,4 +328,25 @@ sqlcmd -S $(terraform output -raw sql_server_fqdn) \
 
 This project is licensed under the MIT License - see the LICENSE file for details.
 
+### GitHub Actions Terraform Security Scanning
+
+This project uses GitHub Actions with Terrascan to automatically scan Terraform configurations for security issues and best practices.
+
+#### Security Scan Workflow
+
+The workflow [`.github/workflows/terraform-scan.yml`](.github/workflows/terraform-scan.yml) runs automatically on:
+- Push events affecting `.tf` files
+- Pull requests affecting `.tf` files
+- Manual triggers (workflow_dispatch)
+
+#### Key Features
+- Automated security scanning of Terraform configurations
+- High and medium severity issue detection
+- Detailed violation reporting
+- Azure-specific security rules
+- Artifact generation for scan results
+
+
+```
+