diff --git a/templates/sast.yml b/templates/sast.yml
index 028d190..bee2c81 100644
--- a/templates/sast.yml
+++ b/templates/sast.yml
@@ -75,6 +75,7 @@ gitlab-advanced-sast:
         - '**/*.mjs'
         - '**/*.cs'
         - '**/*.rb'
+        - '**/*.php'
 
 brakeman-sast:
   extends: .deprecated-16.8
@@ -138,7 +139,7 @@ semgrep-sast:
           "$[[ inputs.excluded_analyzers ]]" !~ /gitlab-advanced-sast/ &&
           "$[[ inputs.run_advanced_sast ]]" == "true"'
       variables:
-        SAST_EXCLUDED_PATHS: "$DEFAULT_SAST_EXCLUDED_PATHS, **/*.py, **/*.go, **/*.java, **/*.js, **/*.jsx, **/*.ts, **/*.tsx, **/*.cjs, **/*.mjs, **/*.cs, **/*.rb"
+        SAST_EXCLUDED_PATHS: "$DEFAULT_SAST_EXCLUDED_PATHS, **/*.py, **/*.go, **/*.java, **/*.js, **/*.jsx, **/*.ts, **/*.tsx, **/*.cjs, **/*.mjs, **/*.cs, **/*.rb, **/*.php"
       exists:
         - '**/*.c'
         - '**/*.cc'
@@ -197,7 +198,7 @@ semgrep-sast:
         - '**/bootstrap*.yml'
         - '**/application*.yaml'
         - '**/bootstrap*.yaml'
-        
+
 sobelow-sast:
   extends: .sast-analyzer
   image: