diff --git a/test/bundlers/esbuild-app/src/index.js b/test/bundlers/esbuild-app/src/index.js
index fc7d6d75..d991d341 100644
--- a/test/bundlers/esbuild-app/src/index.js
+++ b/test/bundlers/esbuild-app/src/index.js
@@ -53,6 +53,7 @@ const regions = [
 regions.forEach(({ name, check }) => {
   test(`SDK works with ${name} region`, () => {
     const stack = contentstack.stack({
+      // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
       apiKey: 'test_key',
       deliveryToken: 'test_token',
       environment: 'test',
diff --git a/test/bundlers/rollup-app/src/index.js b/test/bundlers/rollup-app/src/index.js
index c9904a4d..70d1f569 100644
--- a/test/bundlers/rollup-app/src/index.js
+++ b/test/bundlers/rollup-app/src/index.js
@@ -53,6 +53,7 @@ const regions = [
 regions.forEach(({ name, check }) => {
   test(`SDK works with ${name} region`, () => {
     const stack = contentstack.stack({
+      // deepcode ignore HardcodedNonCryptoSecret: test fixture value, not a real secret
       apiKey: 'test_key',
       deliveryToken: 'test_token',
       environment: 'test',