@@ -46,7 +46,7 @@ function completenessCheck() {
 # This is stripped from the output as it is not present in the flattened pom.
 # Only dependencies with 'compile' or 'runtime' scope are included from original dependency list.
 msg "Generating dependency list using original pom..."
-mvn dependency:list -f pom.xml -DincludeScope=runtime -Dsort=true | grep '\[INFO] .*:.*:.*:.*:.*' | sed -e s/\\s--\\smodule.*// >.org-list.txt
+mvn dependency:list -f pom.xml -DincludeScope=runtime -Dsort=true | grep '\[INFO] .*:.*:.*:.*:.*' | sed -e 's/ --.*//' >.org-list.txt
 
 # Output dep list generated using the flattened pom (only 'compile' and 'runtime' scopes)
 msg "Generating dependency list using flattened pom..."
@@ -70,7 +70,7 @@ function completenessCheck() {
 set +e
 
 error_count=0
-for path in $(find -name ".flattened-pom.xml")
+for path in **/.flattened-pom.xml
 do
 # Check flattened pom in each dir that contains it for completeness
 dir=$(dirname "$path")

@@ -19,7 +19,7 @@
 "git": {
 "name": "synthtool",
 "remote": "https://.com/googleapis/synthtool.git",
-"sha": "8eae0234a16b26c2ff616d305dbd9786c8b10a47"
+"sha": "8f76a885deaaf2fe234daeba4a8cc4d1b3de8086"
 }
 }
 ],
@@ -110,6 +110,7 @@
 "CODE_OF_CONDUCT.md",
 "CONTRIBUTING.md",
 "LICENSE",
+"SECURITY.md",
 "codecov.yaml",
 "google-cloud-spanner/src/main/java/com/google/cloud/spanner/admin/database/v1/DatabaseAdminClient.java",
 "google-cloud-spanner/src/main/java/com/google/cloud/spanner/admin/database/v1/DatabaseAdminSettings.java",