iac static analysis ci/cd