diff --git a/templates/sast.yml b/templates/sast.yml
index ccb3eec..7f1100f 100644
--- a/templates/sast.yml
+++ b/templates/sast.yml
@@ -81,6 +81,7 @@ gitlab-advanced-sast:
         - '**/*.mjs'
         - '**/*.cs'
         - '**/*.rb'
+        - '**/*.php'
 
 brakeman-sast:
   extends: .deprecated-16.8
@@ -144,7 +145,7 @@ semgrep-sast:
           "$[[ inputs.excluded_analyzers ]]" !~ /gitlab-advanced-sast/ &&
           "$[[ inputs.run_advanced_sast ]]" == "true"'
       variables:
-        SAST_EXCLUDED_PATHS: "$DEFAULT_SAST_EXCLUDED_PATHS, **/*.py, **/*.go, **/*.java, **/*.js, **/*.jsx, **/*.ts, **/*.tsx, **/*.cjs, **/*.mjs, **/*.cs, **/*.rb"
+        SAST_EXCLUDED_PATHS: "$DEFAULT_SAST_EXCLUDED_PATHS, **/*.py, **/*.go, **/*.java, **/*.js, **/*.jsx, **/*.ts, **/*.tsx, **/*.cjs, **/*.mjs, **/*.cs, **/*.rb, **/*.php"
       exists:
         - '**/*.c'
         - '**/*.cc'
@@ -203,7 +204,7 @@ semgrep-sast:
         - '**/bootstrap*.yml'
         - '**/application*.yaml'
         - '**/bootstrap*.yaml'
-        
+
 sobelow-sast:
   extends: .sast-analyzer
   image: