diff --git a/.arista/secret_allowlist.yaml b/.arista/secret_allowlist.yaml
new file mode 100644
index 00000000..00ed5bab
--- /dev/null
+++ b/.arista/secret_allowlist.yaml
@@ -0,0 +1,7 @@
+# .arista/secret_allowlist.yaml
+
+version: v1.0
+allowed_secrets:
+  - filepath_pattern: "test/test_data/*"
+    category: FALSE_POSITIVE
+    reason: secrets used for tests are not used in production