Bound Bicep diagnostic suppression before accepting a clean build

Source facts

Bicep’s disable-next-line directive affects only the following line. By contrast, disable-diagnostics suppresses the named diagnostics throughout the file or until restore-diagnostics reenables them. Directives require at least one diagnostic or rule identifier, and those identifiers are case-sensitive. Microsoft recommends limited, intentional use with an explanatory comment. Microsoft Learn.

Applicability

Review both the location of a directive and the interval it affects. Separate an approved exception for one expression from a broader decision to suppress a diagnostic in later resources or modules. Do not infer the scope of the exception from its accompanying comment alone.

DSE recommendation

DSE recommends choosing the smallest suppression scope that matches the reviewed exception. Record why the diagnostic does not apply, identify the exact rule or code, and inspect any restoration point. When moving or adding code around a file-wide directive, revisit the affected interval. A clean diagnostics list should not replace an examination of which checks were deliberately disabled.

Verification

Use a controlled copy with a known instance of the diagnostic inside and outside the intended exception. Check that the outside case remains visible and that restoration occurs where planned. Verify identifier spelling and capitalization with the actual compiler or linter output. Preserve the before-and-after diagnostics and source diff, without retaining test suppressions in production merely to obtain a clean build.

Official references

Microsoft Learn. Source retrieved September 9, 2026.