refined patterns

This commit is contained in:
Julian Thome 2025-03-17 10:25:00 +01:00
parent 66475db496
commit 20f386270a

View file

@ -156,12 +156,8 @@ semgrep-sast:
- '**/*.kt' - '**/*.kt'
- '**/*.properties' - '**/*.properties'
- '**/application*.yml' - '**/application*.yml'
- '**/management*.yml'
- '**/actuator*.yml'
- '**/bootstrap*.yml' - '**/bootstrap*.yml'
- '**/application*.yaml' - '**/application*.yaml'
- '**/management*.yaml'
- '**/actuator*.yaml'
- '**/bootstrap*.yaml' - '**/bootstrap*.yaml'
## In case gitlab-advanced-sast already covers all the files that semgrep-sast would have scanned ## In case gitlab-advanced-sast already covers all the files that semgrep-sast would have scanned
- if: '$CI_COMMIT_BRANCH && - if: '$CI_COMMIT_BRANCH &&
@ -199,6 +195,10 @@ semgrep-sast:
- '**/*.yml' - '**/*.yml'
- '**/*.yaml' - '**/*.yaml'
- '**/*.properties' - '**/*.properties'
- '**/application*.yml'
- '**/bootstrap*.yml'
- '**/application*.yaml'
- '**/bootstrap*.yaml'
sobelow-sast: sobelow-sast:
extends: .sast-analyzer extends: .sast-analyzer