diff --git a/config.yaml b/config.yaml
index df1de32..dcbe35b 100644
--- a/config.yaml
+++ b/config.yaml
@@ -1,9 +1,5 @@
 actions:
   - replace:
-      - target: ".shim-unsigned-x64.metadata"
-        find: "e6f506462069aa17d2e8610503635c20f3a995c3 SOURCES/redhatsecurebootca5.cer"
-        replace: "cdec924ca437a4509dcb178396996ddf92c11183 SOURCES/shim-15.8.tar.bz2"
-        count: 1
       - target: "spec"
         find: "%global efidir %(eval echo $(grep ^ID= /etc/os-release | sed -e 's/^ID=//' -e 's/rhel/redhat/'))"
         replace: "%global efidir almalinux"
@@ -30,18 +26,12 @@ actions:
       - target: "spec"
         find: |
               if [ -s "%{SOURCE1}" ]; then
-              	MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE1} "MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE1} "
-              fi
-              if [ -s "%{SOURCE2}" ]; then
-              	MAKEFLAGS="$MAKEFLAGS VENDOR_DBX_FILE=%{SOURCE2} "
+              	MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE1} "
               fi
         replace: |
               if [ -s vendor_db.esl ]; then
               	MAKEFLAGS="$MAKEFLAGS VENDOR_DB_FILE=../vendor_db.esl"
               fi
-              if [ -s "%{SOURCE2}" ]; then
-                MAKEFLAGS="$MAKEFLAGS VENDOR_DBX_FILE=%{SOURCE2}"
-              fi
         count: 2
 
   - modify_release:
@@ -53,6 +43,12 @@ actions:
         lines:
           - "Source1:	redhatsecurebootca5.cer"
           - "Source3:	sbat.redhat.csv"
+      - target: ".shim-unsigned-x64.metadata"
+        lines:
+          - "e6f506462069aa17d2e8610503635c20f3a995c3 SOURCES/redhatsecurebootca5.cer"
+      - target: ".gitignore"
+        lines:
+          - "SOURCES/redhatsecurebootca5.cer"
 
   - changelog_entry:
       - name: "Eduard Abdullin"
@@ -75,4 +71,4 @@ actions:
         number: 103
 
   - delete_files:
-      - file_name: "sbat.redhat.csv"
\ No newline at end of file
+      - file_name: "sbat.redhat.csv"