From 20f386270aa0d88a5eebe1a6eaa7c0174328567a Mon Sep 17 00:00:00 2001
From: Julian Thome <jthome@gitlab.com>
Date: Mon, 17 Mar 2025 10:25:00 +0100
Subject: [PATCH] refined patterns

---
 templates/sast.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/templates/sast.yml b/templates/sast.yml
index 557df93..3e28a7c 100644
--- a/templates/sast.yml
+++ b/templates/sast.yml
@@ -156,12 +156,8 @@ semgrep-sast:
         - '**/*.kt'
         - '**/*.properties'
         - '**/application*.yml'
-        - '**/management*.yml'
-        - '**/actuator*.yml'
         - '**/bootstrap*.yml'
         - '**/application*.yaml'
-        - '**/management*.yaml'
-        - '**/actuator*.yaml'
         - '**/bootstrap*.yaml'
     ## In case gitlab-advanced-sast already covers all the files that semgrep-sast would have scanned
     - if: '$CI_COMMIT_BRANCH &&
@@ -199,6 +195,10 @@ semgrep-sast:
         - '**/*.yml'
         - '**/*.yaml'
         - '**/*.properties'
+        - '**/application*.yml'
+        - '**/bootstrap*.yml'
+        - '**/application*.yaml'
+        - '**/bootstrap*.yaml'
         
 sobelow-sast:
   extends: .sast-analyzer