diff --git a/.gitignore b/.gitignore
index 056cf69d2..93d7878e1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -43,3 +43,6 @@ DataDir/
 
 *.log
 
+# gitleaks scan output (local secret-scan report, not for the repo)
+gitleaks-report.json
+