diff --git a/src/DurableTask.AzureServiceFabric/Remote/RemoteOrchestrationServiceClient.cs b/src/DurableTask.AzureServiceFabric/Remote/RemoteOrchestrationServiceClient.cs
index 2143dd414..5f45cb752 100644
--- a/src/DurableTask.AzureServiceFabric/Remote/RemoteOrchestrationServiceClient.cs
+++ b/src/DurableTask.AzureServiceFabric/Remote/RemoteOrchestrationServiceClient.cs
@@ -305,6 +305,7 @@ private async Task PutJsonAsync(string instanceId, string fragment, object @obje
         {
             var mediaFormatter = new JsonMediaTypeFormatter()
             {
+                // CodeQL [SM02211] False positive: serialization (write) path only; no untrusted JSON is deserialized here.
                 SerializerSettings = new JsonSerializerSettings { TypeNameHandling = TypeNameHandling.All }
             };