diff --git a/.semgrepignore b/.semgrepignore
new file mode 100644
index 0000000000..5054233eb0
--- /dev/null
+++ b/.semgrepignore
@@ -0,0 +1,3 @@
+/apps/
+/fuzz/
+/quiche/examples/