diff --git a/scan.hcl b/scan.hcl
index 87abe7b964..1bd1e8b126 100644
--- a/scan.hcl
+++ b/scan.hcl
@@ -31,6 +31,13 @@ repository {
       vulnerabilites = [
         "GO-2024-2631", # go-jose/v3@v3.0.3 (false positive)
       ]
+      paths = [
+        "internal/tools/proto-gen-rpc-glue/e2e/consul/*",
+        "test/integration/connect/envoy/test-sds-server/*",
+        "test/integration/consul-container/*",
+        "testing/deployer/*",
+        "test-integ/*",
+      ]
     }
   }
 }