diff --git a/trivy-secret.yaml b/trivy-secret.yaml
new file mode 100644
index 00000000000..027b9ce9978
--- /dev/null
+++ b/trivy-secret.yaml
@@ -0,0 +1,6 @@
+rules:
+  - id: private-key
+    category: CategoryAsymmetricPrivateKey
+    title: Asymmetric Private Key
+    severity: HIGH
+    regex: (?i)-----\s*?BEGIN[ A-Z0-9_-]*?PRIVATE KEY( BLOCK)?\s*?-----(?P<secret>[A-Za-z0-9=+/\s]*?)-----\s*?END[ A-Z0-9_-]*? PRIVATE KEY( BLOCK)?\s*?-----
\ No newline at end of file