feat: updated tfsec.yml file and bug:updated changelog.yml name

[vibhutigoyal]

what
• updated .github/workflows tfsec.yml file.
• updated .github/workflows changelog.yml name.
why
• tfsec is a static analysis security scanner for your Terraform code.
• need to change changelog.yml name.

[clouddrove-ci]

Terraform Security Scan Failed

Show Output

Result #1 MEDIUM Bucket does not have logging enabled 
────────────────────────────────────────────────────────────────────────────────
  main.tf:31-45
────────────────────────────────────────────────────────────────────────────────
   31  ┌ resource "aws_s3_bucket" "s3_default" {
   32  │   count = var.create_bucket == true ? 1 : 0
   33  │ 
   34  │   bucket        = module.labels.id
   35  │   force_destroy = var.force_destroy
   36  │   tags          = module.labels.tags
   37  │ 
   38  │   dynamic "object_lock_configuration" {
   39  └     for_each = var.object_lock_configuration != null ? [1] : []
   ..  
────────────────────────────────────────────────────────────────────────────────
          ID aws-s3-enable-bucket-logging
      Impact There is no way to determine the access to this bucket
  Resolution Add a logging block to the resource to enable access logging

  More Information
  - https://aquasecurity.github.io/tfsec/latest/checks/aws/s3/enable-bucket-logging/
  - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket
────────────────────────────────────────────────────────────────────────────────


Result #2 MEDIUM Bucket does not have versioning enabled 
────────────────────────────────────────────────────────────────────────────────
  main.tf:31-45
────────────────────────────────────────────────────────────────────────────────
   31  ┌ resource "aws_s3_bucket" "s3_default" {
   32  │   count = var.create_bucket == true ? 1 : 0
   33  │ 
   34  │   bucket        = module.labels.id
   35  │   force_destroy = var.force_destroy
   36  │   tags          = module.labels.tags
   37  │ 
   38  │   dynamic "object_lock_configuration" {
   39  └     for_each = var.object_lock_configuration != null ? [1] : []
   ..  
────────────────────────────────────────────────────────────────────────────────
          ID aws-s3-enable-versioning
      Impact Deleted or modified data would not be recoverable
  Resolution Enable versioning to protect against accidental/malicious removal or modification

  More Information
  - https://aquasecurity.github.io/tfsec/latest/checks/aws/s3/enable-versioning/
  - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#versioning
────────────────────────────────────────────────────────────────────────────────


  timings
  ──────────────────────────────────────────
  disk i/o             117.4µs
  parsing              53.436557ms
  adaptation           172.601µs
  checks               10.912932ms
  total                64.63949ms

  counts
  ──────────────────────────────────────────
  modules downloaded   0
  modules processed    1
  blocks processed     84
  files read           3

  results
  ──────────────────────────────────────────
  passed               4
  ignored              6
  critical             0
  high                 0
  medium               2
  low                  0

  4 passed, 6 ignored, 2 potential problem(s) detected.

[clouddrove-ci]

Terraform Security Scan Failed

Show Output

Result #1 MEDIUM Bucket does not have logging enabled 
────────────────────────────────────────────────────────────────────────────────
  main.tf:31-45
────────────────────────────────────────────────────────────────────────────────
   31  ┌ resource "aws_s3_bucket" "s3_default" {
   32  │   count = var.create_bucket == true ? 1 : 0
   33  │ 
   34  │   bucket        = module.labels.id
   35  │   force_destroy = var.force_destroy
   36  │   tags          = module.labels.tags
   37  │ 
   38  │   dynamic "object_lock_configuration" {
   39  └     for_each = var.object_lock_configuration != null ? [1] : []
   ..  
────────────────────────────────────────────────────────────────────────────────
          ID aws-s3-enable-bucket-logging
      Impact There is no way to determine the access to this bucket
  Resolution Add a logging block to the resource to enable access logging

  More Information
  - https://aquasecurity.github.io/tfsec/latest/checks/aws/s3/enable-bucket-logging/
  - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket
────────────────────────────────────────────────────────────────────────────────


Result #2 MEDIUM Bucket does not have versioning enabled 
────────────────────────────────────────────────────────────────────────────────
  main.tf:31-45
────────────────────────────────────────────────────────────────────────────────
   31  ┌ resource "aws_s3_bucket" "s3_default" {
   32  │   count = var.create_bucket == true ? 1 : 0
   33  │ 
   34  │   bucket        = module.labels.id
   35  │   force_destroy = var.force_destroy
   36  │   tags          = module.labels.tags
   37  │ 
   38  │   dynamic "object_lock_configuration" {
   39  └     for_each = var.object_lock_configuration != null ? [1] : []
   ..  
────────────────────────────────────────────────────────────────────────────────
          ID aws-s3-enable-versioning
      Impact Deleted or modified data would not be recoverable
  Resolution Enable versioning to protect against accidental/malicious removal or modification

  More Information
  - https://aquasecurity.github.io/tfsec/latest/checks/aws/s3/enable-versioning/
  - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket#versioning
────────────────────────────────────────────────────────────────────────────────


  timings
  ──────────────────────────────────────────
  disk i/o             106.9µs
  parsing              77.76719ms
  adaptation           171µs
  checks               9.189387ms
  total                87.234477ms

  counts
  ──────────────────────────────────────────
  modules downloaded   0
  modules processed    1
  blocks processed     84
  files read           3

  results
  ──────────────────────────────────────────
  passed               4
  ignored              6
  critical             0
  high                 0
  medium               2
  low                  0

  4 passed, 6 ignored, 2 potential problem(s) detected.

[yadavprakash]

LGTM!