From 6403d60f3a53e1b7c911a728750a462ab021a865 Mon Sep 17 00:00:00 2001
From: Julian Thome <jthome@gitlab.com>
Date: Tue, 11 Mar 2025 16:45:59 +0100
Subject: [PATCH] Refine exists patterns.

---
 templates/sast.yml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/templates/sast.yml b/templates/sast.yml
index 927d012..154f816 100644
--- a/templates/sast.yml
+++ b/templates/sast.yml
@@ -154,9 +154,13 @@ semgrep-sast:
         - '**/*.swift'
         - '**/*.m'
         - '**/*.kt'
-        - '**/*.yml'
-        - '**/*.yaml'
         - '**/*.properties'
+        - '**/application*.yml'
+        - '**/management*.yml'
+        - '**/actuator*.yml'
+        - '**/application*.yaml'
+        - '**/management*.yaml'
+        - '**/actuator*.yaml'
     ## In case gitlab-advanced-sast already covers all the files that semgrep-sast would have scanned
     - if: '$CI_COMMIT_BRANCH &&
           $GITLAB_FEATURES =~ /\bsast_advanced\b/ &&