docs: add lab6 submission - IaC security scanning and comparative ana…

[Uiyrte]

Goal

Implement a multi-level IaC scanning strategy in CI/CD pipeline using tfsec, Checkov, Terrascan and KICS to enhance infrastructure code security and compliance.

Changes

Added matrix assembly along the Terraform, Pulumi, and Ansible paths.
Integrated scanners: tfsec, Checkov, Terrascan, KICS.
Build failure policies are configured: HIGH — fail, MEDIUM — warning.
Implemented the publication of reports (JSON, HTML, SARIF).
Added baseline files with exception annotations.
Night scans are configured on the main branch.

Testing

Pre-commit hooks have been tested with tfsec and Checkov.
Parallel scans and SARIF annotations have been tested in the pull request.
The vulnerabilities for checking fail/warn logic are modeled.
The publication of artifacts and baseline files has been verified.
Nightly scans were successfully performed on the main branch.

Artifacts & Screenshots

• Terraform Reports:
  -- labs/lab6/analysis/tfsec-report.txt
  -- labs/lab6/analysis/checkov-terraform-report.txt
  -- labs/lab6/analysis/terrascan-report.txt
• Pulumi Reports (KICS):
  -- labs/lab6/analysis/kics-pulumi-results.json
  -- labs/lab6/analysis/kics-pulumi-report.html
  -- Ansible Reports (KICS):
  -- labs/lab6/analysis/kics-ansible-results.json
  -- labs/lab6/analysis/kics-ansible-report.html
• Summary Analysis:
  -- labs/lab6/analysis/terraform-comparison.txt
  -- labs/lab6/analysis/pulumi-analysis.txt
  -- labs/lab6/analysis/ansible-analysis.txt
  -- labs/lab6/analysis/tool-comparison.txt
• Final Submission:
  -- labs/submission6.md

Checklist

• Clear title
• Docs updated if needed
• No secrets/large temp files
• Task 1 done — Terraform & Pulumi scanning with multiple tools
• Task 2 done — Ansible security analysis
• Task 3 done — Comparative tool analysis and security insights