diff --git a/pegleg/engine/errorcodes.py b/pegleg/engine/errorcodes.py
index 08261cbf..1ce3b2a9 100644
--- a/pegleg/engine/errorcodes.py
+++ b/pegleg/engine/errorcodes.py
@@ -19,7 +19,7 @@ DECKHAND_RENDER_EXCEPTION = 'P005'
 FILE_MISSING_YAML_DOCUMENT_HEADER = 'P006'
 FILE_CONTAINS_INVALID_YAML = 'P007'
 DOCUMENT_LAYER_MISMATCH = 'P008'
-SECRET_NOT_ENCRYPTED_POLICY = 'P009'
+SECRET_NOT_ENCRYPTED_POLICY = 'P009'  # nosec (alexanderhughes)
 
 ALL_CODES = (
     SCHEMA_STORAGE_POLICY_MISMATCH_FLAG,
diff --git a/pegleg/engine/util/pegleg_secret_management.py b/pegleg/engine/util/pegleg_secret_management.py
index 7a18589d..d832a2b6 100644
--- a/pegleg/engine/util/pegleg_secret_management.py
+++ b/pegleg/engine/util/pegleg_secret_management.py
@@ -27,8 +27,8 @@ from pegleg.engine.util.pegleg_managed_document import \
     PeglegManagedSecretsDocument as PeglegManagedSecret
 
 LOG = logging.getLogger(__name__)
-PASSPHRASE_PATTERN = '^.{24,}$'
-ENV_PASSPHRASE = 'PEGLEG_PASSPHRASE'
+PASSPHRASE_PATTERN = '^.{24,}$'  # nosec (alexanderhughes)
+ENV_PASSPHRASE = 'PEGLEG_PASSPHRASE'  # nosec (alexanderhughes)
 ENV_SALT = 'PEGLEG_SALT'