diff --git a/.github/workflows/populate-hapi.yaml b/.github/workflows/populate-hapi.yaml
index 0f56b98e094..cb1fd66e79e 100644
--- a/.github/workflows/populate-hapi.yaml
+++ b/.github/workflows/populate-hapi.yaml
@@ -52,6 +52,7 @@ jobs:
         done
         echo "::set-output name=commits::$COMMITS"
 
+
     - name: Print modified files
       if: ${{ ! github.event.created }}
       run: |
diff --git a/scenarios/crowdsecurity/aws-bf.yaml b/scenarios/crowdsecurity/aws-bf.yaml
index d9afeade75a..e4a1e500c44 100644
--- a/scenarios/crowdsecurity/aws-bf.yaml
+++ b/scenarios/crowdsecurity/aws-bf.yaml
@@ -15,8 +15,8 @@ reprocess: true
 scope:
   type: Ip
 labels:
-  spoofable: 0
   confidence: 3
+  spoofable: 0
   classification:
    - attack.T1110
   behavior: "cloud:bruteforce"