=== Workflows configurados (cobertura SAST/secrets/containers) ===
-rw-r--r--@ 1 gabrielurenachacon  staff   1135 May 27 17:59 /Volumes/1074/ProyectosSoftware/Fintrix/FintrixsPayMicroservicios/.github/workflows/backend-ci.yml
-rw-r--r--@ 1 gabrielurenachacon  staff   2770 May 27 17:59 /Volumes/1074/ProyectosSoftware/Fintrix/FintrixsPayMicroservicios/.github/workflows/kong-deck-sync.yml
-rw-r--r--@ 1 gabrielurenachacon  staff   3170 May 27 17:59 /Volumes/1074/ProyectosSoftware/Fintrix/FintrixsPayMicroservicios/.github/workflows/kong-private-deploy.yml
-rw-r--r--@ 1 gabrielurenachacon  staff  17820 May 27 17:59 /Volumes/1074/ProyectosSoftware/Fintrix/FintrixsPayMicroservicios/.github/workflows/microservices-eks-deploy.yml
-rw-r--r--@ 1 gabrielurenachacon  staff   8203 May 27 17:59 /Volumes/1074/ProyectosSoftware/Fintrix/FintrixsPayMicroservicios/.github/workflows/pci-container-scan.yml
-rw-r--r--@ 1 gabrielurenachacon  staff  18633 May 27 18:30 /Volumes/1074/ProyectosSoftware/Fintrix/FintrixsPayMicroservicios/.github/workflows/pci-sast-analysis.yml
-rw-r--r--@ 1 gabrielurenachacon  staff  13262 May 27 17:59 /Volumes/1074/ProyectosSoftware/Fintrix/FintrixsPayMicroservicios/.github/workflows/terraform-cloudtrail-migrate.yml
-rw-r--r--@ 1 gabrielurenachacon  staff  14243 May 27 17:59 /Volumes/1074/ProyectosSoftware/Fintrix/FintrixsPayMicroservicios/.github/workflows/terraform.yml

=== SAST workflow content (extracto técnicas y plugins) ===
name: PCI — SAST Code Analysis
    name: ESLint security scan
      run:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Setup Node
        uses: actions/setup-node@v4
      - name: Install dependencies
        run: npm install
      - name: Install ESLint security plugins
        run: |
      - name: Create security ESLint config
        run: |
      - name: Run ESLint security scan
        run: |
      - name: Upload ESLint results
        uses: actions/upload-artifact@v4
          name: eslint-security-results
      - name: Fail on ESLint security errors
        run: |
    name: npm audit
      run:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Setup Node
        uses: actions/setup-node@v4
      - name: Install dependencies
        run: npm install
      - name: Run npm audit
        run: |
      - name: Upload audit results
        uses: actions/upload-artifact@v4
          name: npm-audit-results
      - name: Fail on HIGH/CRITICAL dependency vulnerabilities
        run: npm audit --omit=dev --audit-level=high
    name: CodeQL analysis
      - name: Checkout
        uses: actions/checkout@v4
      - name: Initialize CodeQL
        uses: github/codeql-action/init@v3
          languages: javascript-typescript
          queries: security-extended
      - name: Autobuild
        uses: github/codeql-action/autobuild@v3
      - name: Perform CodeQL analysis
        uses: github/codeql-action/analyze@v3
      - name: Upload CodeQL SARIF artifact
        uses: actions/upload-artifact@v4
          name: codeql-results
    name: PCI anti-pattern scan
