You can use the Qualys IaC Security extension as a pre-deployment task in your project pipeline. After installing, you can see the Qualys IaC Scan option when you open the context menu.
To run a simple static scan, choose the Qualys IaC Scan option from the context menu or use the shortcut key (Ctrl + Shift + Q).
Next step: