diff --git a/templates/sast.yml b/templates/sast.yml index 927d012..154f816 100644 --- a/templates/sast.yml +++ b/templates/sast.yml @@ -154,9 +154,13 @@ semgrep-sast: - '**/*.swift' - '**/*.m' - '**/*.kt' - - '**/*.yml' - - '**/*.yaml' - '**/*.properties' + - '**/application*.yml' + - '**/management*.yml' + - '**/actuator*.yml' + - '**/application*.yaml' + - '**/management*.yaml' + - '**/actuator*.yaml' ## In case gitlab-advanced-sast already covers all the files that semgrep-sast would have scanned - if: '$CI_COMMIT_BRANCH && $GITLAB_FEATURES =~ /\bsast_advanced\b/ &&