diff --git a/.gitleaks.toml b/.gitleaks.toml
new file mode 100644
index 0000000..26993f9
--- /dev/null
+++ b/.gitleaks.toml
@@ -0,0 +1,10 @@
+title = "minimalx .github gitleaks config"
+
+[extend]
+useDefault = true
+
+[allowlist]
+description = "Committed test fixtures that are intentionally non-secret"
+paths = [
+  '''actions/sign-firmware/tests/dummy_private_key\.pem''',
+]
diff --git a/.gitleaksignore b/.gitleaksignore
deleted file mode 100644
index bcea93a..0000000
--- a/.gitleaksignore
+++ /dev/null
@@ -1 +0,0 @@
-6f4c6ffaf316f20ecc539f8e437ea9ce629e5cda:actions/sign-firmware/tests/dummy_private_key.pem:private-key:1