diff --git a/.gitleaks.toml b/.gitleaks.toml
new file mode 100644
index 0000000000000..4e997318cab7f
--- /dev/null
+++ b/.gitleaks.toml
@@ -0,0 +1,6 @@
+# This file tells Red Hat InfoSec's gitleaks scanner to ignore these paths
+[allowlist]
+  description = "Allowlist"
+  paths = [
+    '''src/cephadm/tests/''',
+  ]