From d146adfce1fee6e468d367c57469df533952c7d5 Mon Sep 17 00:00:00 2001
From: Oscar Hinton <Hinton@users.noreply.github.com>
Date: Tue, 13 Feb 2024 17:02:49 +0100
Subject: [PATCH] Improve checkmarx config (#7928)

Exclude **/spec/**, apps/desktop/native-messaging-test-runner from checkmarx.
---
 .checkmarx/config.yml | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/.checkmarx/config.yml b/.checkmarx/config.yml
index 9dae61e5da..a9e483603a 100644
--- a/.checkmarx/config.yml
+++ b/.checkmarx/config.yml
@@ -1,12 +1,11 @@
 version: 1
 
-# checkmarx-specific related configuration
-# every value in this section is optional
+# Checkmarx configuration file
+#
+# https://checkmarx.com/resource/documents/en/34965-68549-configuring-projects-using-config-as-code-files.html
 checkmarx:
-  # configure the checkmarx scan parameters for scanning this specific project
   scan:
-    # configure the checkmarx scan configurations for scanning this specific project
     configs:
-      # configure the SAST related configurations this specific project
       sast:
-        filter: "!*.spec.ts"
+        # Exclude spec files, and test specific files
+        filter: "!*.spec.ts,!**/spec/**,!/apps/desktop/native-messaging-test-runner/"