diff --git a/.github/secret_scanning.yml b/.github/secret_scanning.yml
new file mode 100644
index 00000000..41f1606f
--- /dev/null
+++ b/.github/secret_scanning.yml
@@ -0,0 +1,2 @@
+paths-ignore:
+  - "src/test/resources/tls/*"  # test-tls-certs