Hard-Coded Passwords Secuirty Hotspots not checking appsettings.development.json

I noticed that the c# hard-coded password secuirty hotspots is not picking up my appsetting.Development.json file.
Not sure the reason why not. I’d like to know if I can enforce it as its working fine for test and production files. I want to enforce that no appsettings/config files store secrets and passwords.

Hello Craig,

Can you share a code sample, so that I can better understand the situation? Thanks!