diff --git a/.config/suppress.csk b/.config/suppress.csk
new file mode 100644
index 0000000000..d51c3fea55
--- /dev/null
+++ b/.config/suppress.csk
@@ -0,0 +1,6 @@
+# CredScan suppression file
+# Test certificate with private key
+\\test\\tools\\Modules\\WebListener\\ClientCert.pfx
+\\test\\tools\\Modules\\WebListener\\ServerCert.pfx
+# Test certificate with private key and inline suppression isn't working  
+\\test\\powershell\\Modules\\Microsoft.PowerShell.Security\\certificateCommon.psm1
\ No newline at end of file
diff --git a/.pipelines/templates/package-create-msix.yml b/.pipelines/templates/package-create-msix.yml
index 6573a04b9a..d9d06260f4 100644
--- a/.pipelines/templates/package-create-msix.yml
+++ b/.pipelines/templates/package-create-msix.yml
@@ -8,6 +8,10 @@ jobs:
     - group: msixTools
     - group: 'Azure Blob variable group'
     - group: 'Store Publish Variables'
+    - name: ob_sdl_credscan_suppressionsFile
+      value: $(Build.SourcesDirectory)\PowerShell\.config\suppress.json
+    - name: ob_sdl_tsa_configFile
+      value: $(Build.SourcesDirectory)\PowerShell\.config\tsaoptions.json
     - name: ob_outputDirectory
       value: '$(Build.ArtifactStagingDirectory)/ONEBRANCH_ARTIFACT'