diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index 637c53f3ea..85eb424c9f 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -1 +1,4 @@
 * @snowflakedb/snow-drivers-warsaw
+
+# GitHub Advanced Security Secret Scanning config
+/.github/secret_scanning.yml @snowflakedb/prodsec-security-manager-write
diff --git a/.github/secret_scanning.yml b/.github/secret_scanning.yml
new file mode 100644
index 0000000000..d25ce24641
--- /dev/null
+++ b/.github/secret_scanning.yml
@@ -0,0 +1,2 @@
+paths-ignore:
+  - "**/test/data/**"