diff --git a/.checkmarx/config.yml b/.checkmarx/config.yml
new file mode 100644
index 0000000000..7688854cd9
--- /dev/null
+++ b/.checkmarx/config.yml
@@ -0,0 +1,11 @@
+version: 1
+
+# Checkmarx configuration file
+#
+# https://checkmarx.com/resource/documents/en/34965-68549-configuring-projects-using-config-as-code-files.html
+checkmarx:
+  scan:
+    configs:
+      sast:
+        # Exclude test directory
+        filter: "!test"