diff --git a/.checkmarx/config.yml b/.checkmarx/config.yml
new file mode 100644
index 000000000..11083f40b
--- /dev/null
+++ b/.checkmarx/config.yml
@@ -0,0 +1,11 @@
+version: 1
+
+# Checkmarx configuration file
+#
+# https://docs.checkmarx.com/en/34965-68549-configuring-projects-using-config-as-code-files.html
+checkmarx:
+  scan:
+    configs:
+      sast:
+        # Exclude test directories
+        filter: "!src/test/**"