diff --git a/azure-pipelines/build.yml b/azure-pipelines/build.yml
index 2e1f2fcd..9cdcd59c 100644
--- a/azure-pipelines/build.yml
+++ b/azure-pipelines/build.yml
@@ -136,6 +136,10 @@ jobs:
         - ${{ if parameters.EnableOptProf }}:
           - powershell: Write-Host "##vso[task.setvariable variable=PROFILINGINPUTSDROPNAME]$(azure-pipelines/variables/ProfilingInputsDropName.ps1)"
             displayName: ⚙ Set ProfilingInputsDropName for optprof
+      sdl:
+        credscan:
+          suppressionsFile: $(Build.SourcesDirectory)/azure-pipelines/CredScanSuppressions.json
+          debugMode: true # required for whole directory suppressions
 
       outputParentDirectory: $(Build.ArtifactStagingDirectory)
       outputs:
diff --git a/azure-pipelines/official.yml b/azure-pipelines/official.yml
index 6b4081c2..687f618e 100644
--- a/azure-pipelines/official.yml
+++ b/azure-pipelines/official.yml
@@ -71,9 +71,6 @@ extends:
           suppressionFile: $(System.DefaultWorkingDirectory)\azure-pipelines\falsepositives.gdnsuppress
         sbom:
           enabled: true
-        credscan:
-          suppressionsFile: $(Build.SourcesDirectory)/azure-pipelines/CredScanSuppressions.json
-          debugMode: true # required for whole directory suppressions
       stages:
       - stage: Build
         variables: