diff --git a/.gitignore b/.gitignore
index 5c220d45ba..32b1db7ca5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -33,4 +33,11 @@ run_datagen_megascience_glm4-6.sh
 data/*
 node_modules/
 browser-use/
-agent-browser/
\ No newline at end of file
+agent-browser/
+# Private keys
+*.ppk
+*.pem
+privvy*
+
+# CLI config (may contain sensitive SSH paths)
+cli-config.yaml