diff --git a/images.CI/credscan-exclusions.json b/images.CI/credscan-exclusions.json
new file mode 100644
index 000000000..979dfa68d
--- /dev/null
+++ b/images.CI/credscan-exclusions.json
@@ -0,0 +1,9 @@
+{
+    "tool": "Credential Scanner",
+    "suppressions": [
+    {
+        "placeholder": "P@ssword!!",
+        "_justification": "Password used by SQL Express. It is required to interact with database."
+    }
+  ]
+}
\ No newline at end of file