diff --git a/.gitleaks.toml b/.gitleaks.toml
new file mode 100644
index 0000000000..b5df8f0dd4
--- /dev/null
+++ b/.gitleaks.toml
@@ -0,0 +1,5 @@
+# # help Red Hat ignore false positives during its code scans
+[allowlist]
+paths = [
+    'src/ssh/mock.*key',
+]