IaC images

Trivy supports misconfiguration scanning in container images. Although putting IaC files into container images is not common, we should have tests for those cases as Trivy supports it. The scratch image could be enough.

```
FROM scratch
COPY *.tf /
```