diff --git a/.arista/secret_allowlist.yaml b/.arista/secret_allowlist.yaml
new file mode 100644
index 0000000..a1d2153
--- /dev/null
+++ b/.arista/secret_allowlist.yaml
@@ -0,0 +1,5 @@
+version: v1.0
+allowed_secrets:
+- secret_pattern: "-set-up-and-configure-a-certificate-authority-ca-on-ubuntu-20-04"
+  category: FALSE_POSITIVE
+  reason: this seems to be triggered by a URL (L#160)