In the article "Run security scans on Terraform and OpenTofu projects with Trivy and GitHub Actions," the author provides a hands-on tutorial on integrating security scans into infrastructure-as-code (IaC) workflows using Trivy and GitHub Actions.

https://janik6n.net/posts/run-security-scans-on-terraform-and-opentofu-project-with-trivy-and-github-actions/