infra-policy-scanner Go CLI for scanning infrastructure-as-code resources against policy rules. Features JSON input for resources. Rule-based validation. Structured scan reports. Unit tests and CI.