diff --git a/pkg/def/.semgrepignore b/pkg/def/.semgrepignore
new file mode 100644
index 00000000..7e3709da
--- /dev/null
+++ b/pkg/def/.semgrepignore
@@ -0,0 +1,2 @@
+# Ignore validate.go because we only call it with predefined types, and then typecheck later when using result
+validate.go