diff --git a/.clang-tidy b/.clang-tidy
new file mode 100644
index 00000000..ad3e652b
--- /dev/null
+++ b/.clang-tidy
@@ -0,0 +1,5 @@
+# optin.core.EnumCastOutOfRange: disabled because we use a lot of "wrong" enum values for testing
+#                                and internally and don't want those values leak into the public API
+Checks: >
+  -clang-analyzer-optin.core.EnumCastOutOfRange
+WarningsAsErrors: true
diff --git a/.clang-tidy-ignore b/.clang-tidy-ignore
new file mode 100644
index 00000000..dc897499
--- /dev/null
+++ b/.clang-tidy-ignore
@@ -0,0 +1 @@
+include/*
diff --git a/test/.clang-tidy b/test/.clang-tidy
new file mode 100644
index 00000000..0e198a23
--- /dev/null
+++ b/test/.clang-tidy
@@ -0,0 +1,6 @@
+# optin.core.FloatLoopCounter: doubles in for loops - it's fine in the tests
+# optin.performance.Padding: not a performance concern in the tests
+InheritParentConfig: true
+Checks: >
+  -clang-analyzer-security.FloatLoopCounter,
+  -clang-analyzer-optin.performance.Padding,