Infrastructure Security Auditor

# Infrastructure Security Auditor

## Description
Audit infrastructure configuration files for security vulnerabilities and compliance.

## Supported Formats
- Terraform (.tf)
- Docker Compose / Dockerfile
- Kubernetes manifests
- AWS CloudFormation
- GitHub Actions workflows

## Checks
1. **Secrets**: Hardcoded credentials, API keys, passwords
2. **Network**: Open ports, public access, missing firewalls
3. **IAM**: Overly permissive roles, missing MFA
4. **Encryption**: Data at rest, data in transit
5. **Logging**: Audit trails, monitoring gaps
6. **Compliance**: CIS benchmarks, SOC2 controls

## Output
Security report with severity ratings and remediation steps.