Add Tfsec security scanning before Checkov

- Added Tfsec job for Terraform security analysis
- Tfsec specializes in detecting security issues in Terraform code
- Pipeline flow: TFLint -> Tfsec -> Checkov -> SonarQube
- Tfsec focuses on cloud security misconfigurations
- Complements Checkov with different security rule sets

.gitea/workflows/sonarqube.yaml

@@ -27,10 +27,26 @@ jobs:
     - name: Run TFLint
       run: tflint --format compact
 
+  tfsec:
+    name: Tfsec Security Scan
+    runs-on: ubuntu-latest
+    needs: tflint
+    steps:
+    - name: Checking out
+      uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+
+    - name: Run Tfsec
+      uses: aquasecurity/tfsec-action@v1.0.3
+      with:
+        format: default
+        soft_fail: false
+
   checkov:
     name: Checkov Security Scan
     runs-on: ubuntu-latest
-    needs: tflint
+    needs: tfsec
     steps:
     - name: Checking out
       uses: actions/checkout@v4