diff --git a/.github/workflows/semgrep-scan.yml b/.github/workflows/semgrep-scan.yml
index b83fc21..9516cc7 100644
--- a/.github/workflows/semgrep-scan.yml
+++ b/.github/workflows/semgrep-scan.yml
@@ -29,6 +29,7 @@ jobs:
         with:
           config: >- # more at semgrep.dev/explore
             p/docker
+            p/gitlab-bandit
 
         # Instead of `config:`, use rules set in Semgrep App.
         # Get your token from semgrep.dev/manage/settings.