diff --git a/.gitignore b/.gitignore
index 0777e01..ac35ba4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -144,6 +144,11 @@ Thumbs.db
 *.tmp
 *.temp
 
+# Security tooling artifacts (CI downloads)
+gitleaks
+gitleaks.tar.gz
+osv-scanner
+
 # Sensitive data (DO NOT commit production sessions!)
 # server/data/sessions.json - uncomment for production
 public/uploads
diff --git a/gitleaks b/gitleaks
deleted file mode 100755
index 99722f9..0000000
Binary files a/gitleaks and /dev/null differ
diff --git a/gitleaks.tar.gz b/gitleaks.tar.gz
deleted file mode 100644
index ec34408..0000000
Binary files a/gitleaks.tar.gz and /dev/null differ