diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 76c38bc..b5cfb61 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -45,7 +45,8 @@ jobs:
             /d:sonar.coverage.exclusions="**/Migrations/**/*.cs,**/*ModelSnapshot.cs,**/Migrations/*.cs,**/Program.cs" \
             /d:sonar.exclusions="**/Migrations/**/*.cs,**/obj/**,**/bin/**,**/TestResults/**" \
             /d:sonar.cpd.exclusions="**/Migrations/**/*.cs" \
-            /d:sonar.test.inclusions="**/*Tests.cs,**/ChatBot.Tests/**/*.cs"
+            /d:sonar.test.inclusions="**/*Tests.cs,**/ChatBot.Tests/**/*.cs" \
+            /d:sonar.security.hotspots.excluded="**/Models/Configuration/**/*.cs"
           echo "Building project..."
           dotnet build --verbosity normal --no-incremental
           echo "Running tests with coverage..."
diff --git a/.sonarqube/exclusions.txt b/.sonarqube/exclusions.txt
index 90438eb..30dd58a 100644
--- a/.sonarqube/exclusions.txt
+++ b/.sonarqube/exclusions.txt
@@ -12,6 +12,9 @@
 **/bin/**
 **/TestResults/**
 
+## Security Hotspots Exclusions (sonar.security.hotspots.excluded)
+**/Models/Configuration/**/*.cs
+
 ## Source and Test Directories
 Sources: ChatBot/
 Tests: ChatBot.Tests/
@@ -21,3 +24,4 @@ Tests: ChatBot.Tests/
 - ModelSnapshot: Auto-generated EF Core snapshot
 - obj/bin: Build artifacts
 - TestResults: Test execution results
+- Configuration Models: Safe usage of environment variables for secrets (BotToken, ConnectionString)