diff --git a/.gitignore b/.gitignore
index b056a7d..69aef84 100644
--- a/.gitignore
+++ b/.gitignore
@@ -47,3 +47,6 @@ NAAP/
 # Flash decompilation tooling (npm run decompile) — downloaded FFDec
 tools/ffdec/
 .pw-shots/
+
+# CI / local npm audit artifact (must not be linted)
+audit.json