From 52397b81ab06ce07c17ae427661aa4a02e2e1db0 Mon Sep 17 00:00:00 2001
From: Matt Bishop <mbishop@bitwarden.com>
Date: Wed, 28 Jan 2026 09:18:36 -0500
Subject: [PATCH] Have AppSec own Checkmarx config (#6912)

---
 .checkmarx/config.yml | 4 ++++
 .github/CODEOWNERS    | 3 +++
 2 files changed, 7 insertions(+)

diff --git a/.checkmarx/config.yml b/.checkmarx/config.yml
index 641da0eacb..e40c43b662 100644
--- a/.checkmarx/config.yml
+++ b/.checkmarx/config.yml
@@ -11,3 +11,7 @@ checkmarx:
         filter: "!test"
       kics:
         filter: "!dev,!.devcontainer"
+      sca:
+        filter: "!dev,!.devcontainer"
+      containers:
+        filter: "!dev,!.devcontainer"
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index f0c85d98c1..5b1d2a85dc 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -11,6 +11,9 @@
 **/docker-compose.yml @bitwarden/team-appsec @bitwarden/dept-bre
 **/entrypoint.sh @bitwarden/team-appsec @bitwarden/dept-bre
 
+# Scanning tools
+.checkmarx/ @bitwarden/team-appsec
+
 ## BRE team owns these workflows ##
 .github/workflows/publish.yml @bitwarden/dept-bre