diff --git a/.semgrep/time_after.yml b/.semgrep/time_after.yml
new file mode 100644
index 000000000000..b7dc1d028cbe
--- /dev/null
+++ b/.semgrep/time_after.yml
@@ -0,0 +1,16 @@
+rules:
+  - id: "time-after-leak"
+    patterns:
+      - pattern: |
+          select {
+          case <- time.After(...): ...
+          }
+    message: "Potential leak of time.Timer, consider using NewSafeTimer instead"
+    languages:
+      - "go"
+    severity: "WARNING"
+    paths:
+      exclude:
+        - "testutil/*"
+        - "*testing.go"
+        - "*_test.go"