diff --git a/.config/CredScanSuppressions.json b/.config/CredScanSuppressions.json
index 5e64568c0d..02049a6363 100644
--- a/.config/CredScanSuppressions.json
+++ b/.config/CredScanSuppressions.json
@@ -12,6 +12,10 @@
         {
             "file": "build\\actions\\AutoMerge\\dist\\index.js",
             "_justification": "False positive from webpacked code"
+        },
+        {
+          "file": ".devcontainer\\devcontainer.json",
+          "_justification": "Local development environment - not used in production"
         }
     ]
 }
diff --git a/extensions/arc/src/test/models/controllerModel.test.ts b/extensions/arc/src/test/models/controllerModel.test.ts
index 36f4280b05..b3247b2da9 100644
--- a/extensions/arc/src/test/models/controllerModel.test.ts
+++ b/extensions/arc/src/test/models/controllerModel.test.ts
@@ -65,7 +65,7 @@ describe('ControllerModel', function (): void {
 		});
 
 		it('Prompt for password when not in cred store', async function (): Promise<void> {
-			const password = 'password123';
+			const password = 'password123'; // [SuppressMessage("Microsoft.Security", "CS001:SecretInline", Justification="Stub value for testing")]
 
 			// Set up cred store to return empty password
 			const credProviderMock = TypeMoq.Mock.ofType<azdata.CredentialProvider>();
@@ -91,7 +91,7 @@ describe('ControllerModel', function (): void {
 		});
 
 		it('Prompt for password when rememberPassword is true but prompt reconnect is true', async function (): Promise<void> {
-			const password = 'password123';
+			const password = 'password123'; // [SuppressMessage("Microsoft.Security", "CS001:SecretInline", Justification="Stub value for testing")]
 			// Set up cred store to return a password to start with
 			const credProviderMock = TypeMoq.Mock.ofType<azdata.CredentialProvider>();
 			credProviderMock.setup(x => x.readCredential(TypeMoq.It.isAny())).returns(() => Promise.resolve({ credentialId: 'id', password: 'originalPassword' }));
@@ -117,7 +117,7 @@ describe('ControllerModel', function (): void {
 		});
 
 		it('Prompt for password when we already have a password but prompt reconnect is true', async function (): Promise<void> {
-			const password = 'password123';
+			const password = 'password123'; // [SuppressMessage("Microsoft.Security", "CS001:SecretInline", Justification="Stub value for testing")]
 			// Set up cred store to return a password to start with
 			const credProviderMock = TypeMoq.Mock.ofType<azdata.CredentialProvider>();
 			credProviderMock.setup(x => x.readCredential(TypeMoq.It.isAny())).returns(() => Promise.resolve({ credentialId: 'id', password: 'originalPassword' }));
diff --git a/extensions/liveshare/src/guestSessionManager.ts b/extensions/liveshare/src/guestSessionManager.ts
index 4fcccf90cd..15a1e3762a 100644
--- a/extensions/liveshare/src/guestSessionManager.ts
+++ b/extensions/liveshare/src/guestSessionManager.ts
@@ -60,7 +60,7 @@ export class GuestSessionManager {
 					connectionOptions['serverName'] = documentState.serverName;
 					connectionOptions['databaseName'] = documentState.databaseName;
 					connectionOptions['userName'] = 'liveshare';
-					connectionOptions['password'] = 'liveshare';
+					connectionOptions['password'] = 'liveshare'; // [SuppressMessage("Microsoft.Security", "CS001:SecretInline", Justification="Stub value for testing")]
 					connectionOptions['authenticationType'] = 'liveshare';
 					connectionOptions['savePassword'] = false;
 					connectionOptions['saveProfile'] = false;
diff --git a/extensions/liveshare/src/providers/statusProvider.ts b/extensions/liveshare/src/providers/statusProvider.ts
index 9418a09a67..109caaf726 100644
--- a/extensions/liveshare/src/providers/statusProvider.ts
+++ b/extensions/liveshare/src/providers/statusProvider.ts
@@ -40,7 +40,7 @@ export class StatusProvider {
 						connectionOptions['serverName'] = args.profile.options['server'];
 						connectionOptions['databaseName'] = args.profile.options['database'];
 						connectionOptions['userName'] = 'liveshare';
-						connectionOptions['password'] = 'liveshare';
+						connectionOptions['password'] = 'liveshare'; // [SuppressMessage("Microsoft.Security", "CS001:SecretInline", Justification="Stub value for testing")]
 						connectionOptions['authenticationType'] = 'liveshare';
 						connectionOptions['savePassword'] = false;
 						connectionOptions['saveProfile'] = false;