diff --git a/.github/secret_scanning.yml b/.github/secret_scanning.yml
index 2e5f2a01a48..b4f63bc7e72 100644
--- a/.github/secret_scanning.yml
+++ b/.github/secret_scanning.yml
@@ -3,3 +3,7 @@
 # Keep production code and all other paths covered by secret scanning.
 paths-ignore:
   - "pkg/secrets/testdata/catalog/*.json"
+  # Conformance corpus explicitly marked scope: synthetic.
+  - "tools/secrets-conformance/testdata/legacy.json"
+  # Audit test includes a synthetic GitLab registration token that is never submitted.
+  - "tools/secrets-conformance/synthetic_audit_test.go"