diff --git a/.gitignore b/.gitignore
index 0ac7ffbf3..cf79aa114 100644
--- a/.gitignore
+++ b/.gitignore
@@ -16,6 +16,7 @@
 !/*.yaml
 !/*.yml
 !/*.json
+!/*.toml
 !build/*
 
 !/assets/**/*
diff --git a/osv-scanner.toml b/osv-scanner.toml
new file mode 100644
index 000000000..83caeee6f
--- /dev/null
+++ b/osv-scanner.toml
@@ -0,0 +1,11 @@
+[[IgnoredVulns]]
+id = "GO-2022-0646"
+reason = "Agent does not use AWS SDK."
+
+[[IgnoredVulns]]
+id = "GO-2024-2698"
+reason = "Agent does not require any archives access."
+
+[[IgnoredVulns]]
+id = "GO-2021-0064"
+reason = "Agent does not use k8s."