diff --git a/.trivyignore.yaml b/.trivyignore.yaml
new file mode 100644
index 0000000..9c9c9f3
--- /dev/null
+++ b/.trivyignore.yaml
@@ -0,0 +1,8 @@
+secrets:
+  - id: private-key
+    paths:
+      - "*/pulumi_aws/glue/connection.py"
+  - id: gcp-service-account
+    paths:
+      - "*/pulumi_aws/glue/connection.py"
+