diff --git a/.sonarcloud.properties b/.sonarcloud.properties
new file mode 100644
index 0000000..07b8109
--- /dev/null
+++ b/.sonarcloud.properties
@@ -0,0 +1,16 @@
+# SonarQube Cloud analysis scope.
+#
+# Analyse application source only. Tests, build tooling, documentation
+# and CI workflow definitions are never shipped in the published
+# package, so findings there fail the quality gate without describing
+# any risk to users of this project.
+#
+# Every path listed below was verified to exist in this repository;
+# directories this project does not have are deliberately omitted
+# rather than carried over from a sibling repo.
+#
+# This also covers githubactions:S8541, which asks for uv's
+# `--no-build`. That flag cannot be used by a project built from
+# source: uv refuses with "can't be installed because it is marked as
+# `--no-build` but has no binary distribution".
+sonar.exclusions=.github/**,tests/**,bin/**,docs/**