Hacker News Reader

I have hard this from many developers. Are there any good solutions or best practices I should look into?

For the security sanity checking of terraform infra code, take a look at Checkov.