We were trying to find a similar option. We did do our own implementation for scanning using a few apis. Will check if we are able to share additional details. Our commercial product
qmcloud.io does have this option and we do use the pulumi automation api to pass and manage the stack in the backend.