diff --git a/src/DurableTask.AzureStorage/MessageManager.cs b/src/DurableTask.AzureStorage/MessageManager.cs
index 48f46ffac..1fc6d0785 100644
--- a/src/DurableTask.AzureStorage/MessageManager.cs
+++ b/src/DurableTask.AzureStorage/MessageManager.cs
@@ -372,6 +372,7 @@ public void BindToName(Type serializedType, out string assemblyName, out string
             TypeNameSerializationHelper.BindToName(customBinder, serializedType, out assemblyName, out typeName);
         }
 
+        // CodeQL [SM05220] False positive: customer-owned Storage is inside the DTFx trust boundary.
         public Type BindToType(string assemblyName, string typeName)
         {
             return TypeNameSerializationHelper.BindToType(customBinder, assemblyName, typeName);
@@ -391,6 +392,7 @@ public override void BindToName(Type serializedType, out string assemblyName, ou
             TypeNameSerializationHelper.BindToName(customBinder, serializedType, out assemblyName, out typeName);
         }
 
+        // CodeQL [SM05220] False positive: customer-owned Storage is inside the DTFx trust boundary.
         public override Type BindToType(string assemblyName, string typeName)
         {
             return TypeNameSerializationHelper.BindToType(customBinder, assemblyName, typeName);