diff --git a/.clang-tidy b/.clang-tidy
new file mode 100644
index 0000000..4c3ace6
--- /dev/null
+++ b/.clang-tidy
@@ -0,0 +1,4 @@
+# DeprecatedOrUnsafeBufferHandling requests that we use safe versions
+# of mem{cpy,set} for example, but this would affect portability
+Checks: 'clang-diagnostic-*,clang-analyzer-*,-clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling'
+WarningsAsErrors: 'clang-diagnostic-*,clang-analyzer-*'