fix semgrep groups

Signed-off-by: John Seekins <[email protected]>

Author: johnseekins-pathccm

.semgrep_settings.yml

@@ -8,16 +8,12 @@ rulesets:
   - p/github-actions
   - p/jwt
   - p/lockfiles
-  - p/nodejs
   - p/owasp-top-ten
-  # - p/python
+  - p/python
   - p/react
-  # - p/ruby
   - p/security-audit
   - p/sql-injection
   - p/supply-chain
-  - p/terraform
-  - p/typescript
   - p/xss
 excluded:
   # we don't directly host any containers, so ensuring an un-privileged user is extra work (currently)
@@ -32,9 +28,3 @@ excluded:
   - javascript.lang.security.audit.detect-non-literal-fs-filename.detect-non-literal-fs-filename
   # ignored github action rules
   - yaml.github-actions.security.third-party-action-not-pinned-to-commit-sha.third-party-action-not-pinned-to-commit-sha
-  # ignored terraform rules (mutable ECR images, cloudwatch group configuration, etc.)
-  - terraform.aws.security.aws-secretsmanager-secret-unencrypted.aws-secretsmanager-secret-unencrypted
-  - terraform.aws.security.aws-ecr-mutable-image-tags.aws-ecr-mutable-image-tags
-  - terraform.aws.security.aws-cloudwatch-log-group-unencrypted.aws-cloudwatch-log-group-unencrypted
-  - terraform.aws.security.aws-cloudwatch-log-group-no-retention.aws-cloudwatch-log-group-no-retention
-  - terraform.aws.security.aws-lambda-x-ray-tracing-not-active.aws-lambda-x-ray-tracing-not-active