Developed and integrated an automated Terraform security analysis workflow for the IndicoDataSolutions/tf_cod repository, focusing on enhancing security governance within the CI/CD pipeline. Leveraging GitHub Actions and YAML, the solution runs tfsec scans on pushes to main and release branches, on a weekly schedule, and during pull requests to main. The workflow generates SARIF reports and uploads them for centralized security analysis, enabling early detection of configuration vulnerabilities and reducing manual review effort. This approach shifted security checks earlier in the development process, improved traceability, and streamlined DevOps practices by embedding security scanning directly into the continuous integration workflow.