diff --git a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2025-07-01-preview/SourceControls.json b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2025-07-01-preview/SourceControls.json
index 728502ac0d14..223dc55d0948 100644
--- a/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2025-07-01-preview/SourceControls.json
+++ b/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2025-07-01-preview/SourceControls.json
@@ -405,6 +405,11 @@
           "description": "Service principal metadata.",
           "$ref": "#/definitions/ServicePrincipal"
         },
+        "workloadIdentityFederation": {
+          "description": "Workload Identity metadata.",
+          "$ref": "#/definitions/WorkloadIdentityFederation",
+          "readOnly": true
+        },
         "repositoryAccess": {
           "description": "Repository access credentials. This is write-only object and it never returns back to a user.",
           "x-ms-mutability": [
@@ -551,6 +556,37 @@
         }
       }
     },
+    "WorkloadIdentityFederation": {
+      "type": "object",
+      "description": "Workload Identity Federation metadata.",
+      "properties": {
+        "id": {
+          "description": "Id of Workload Identity Federation.",
+          "type": "string",
+          "readOnly": true
+        },
+        "tenantId": {
+          "description": "Tenant id of Workload Identity Federation.",
+          "type": "string",
+          "readOnly": true
+        },
+        "appId": {
+          "description": "App id of Workload Identity Federation.",
+          "type": "string",
+          "readOnly": true
+        },
+        "subject": {
+          "description": "Subject of Workload Identity Federation.",
+          "type": "string",
+          "readOnly": true
+        },
+        "issuer": {
+          "description": "Issuer of Workload Identity Federation.",
+          "type": "string",
+          "readOnly": true
+        }
+      }
+    },
     "RepositoryResourceInfo": {
       "type": "object",
       "description": "Resources created in user's repository for the source-control.",
diff --git a/specification/securityinsights/resource-manager/readme.md b/specification/securityinsights/resource-manager/readme.md
index e2c642cf88ad..8a2882f34317 100644
--- a/specification/securityinsights/resource-manager/readme.md
+++ b/specification/securityinsights/resource-manager/readme.md
@@ -73,6 +73,49 @@ input-file:
   - Microsoft.SecurityInsights/preview/2025-07-01-preview/WorkspaceManagerConfigurations.json
   - Microsoft.SecurityInsights/preview/2025-07-01-preview/WorkspaceManagerGroups.json
   - Microsoft.SecurityInsights/preview/2025-07-01-preview/WorkspaceManagerMembers.json
+suppressions:
+  - code: AvoidAdditionalProperties
+    from: dataConnectors.json
+    reason: These properties are unknown and need to be specified by the customer (each request can have different values)
+  - code: AvoidAdditionalProperties
+    from: Entities.json
+    reason: These properties are unknown and changed frequently (each request can have different values for each entity)
+  - code: AvoidAdditionalProperties
+    from: EntityQueries.json
+    reason: These properties are unknown and changed frequently (each request can have different values for each entity)
+  - code: AvoidAdditionalProperties
+    from: EntityQueryTemplates.json
+    reason: These properties are unknown and changed frequently (each request can have different values for each entity)
+  - code: AvoidAdditionalProperties
+    from: AlertRules.json
+    reason: These properties are unknown and changed frequently (each request can have different values for each entity)
+  - code: AvoidAdditionalProperties
+    from: Recommendations.json
+    reason: These properties are unknown and changed frequently (each request can have different values for each entity)
+  - code: AvoidAnonymousTypes
+    from: Recommendations.json
+    reason: These properties are unknown (each request can have different values for each entity)
+  - code: AvoidAdditionalProperties
+    from: TriggeredAnalyticsRuleRuns.json
+    reason: TriggeredAnalyticsRuleRun does not include a property called "additionalProperties", it is only used to mark that 'ruleRunAdditionalData' is a dictionary or string to object.
+  - code: AvoidAdditionalProperties
+    from: ThreatIntelligenceQuery.json
+    reason: These properties are required in current API. The team is working on a new version of API to resolve it in the future release.
+  - code: GetCollectionOnlyHasValueAndNextLink
+    from: Entities.json
+    reason: This API is published to customers and we have not changed it in the past year, nor will we be able to change it without breaking changes to customers.
+  - code: DefinitionsPropertiesNamesCamelCase
+    from: Entities.json
+    reason: This API is published to customers and we have not changed it in the past year, nor will we be able to change it without breaking changes to customers.
+  - code: RequiredPropertiesMissingInResourceModel
+    from: Entities.json
+    reason: This API is published to customers and we have not changed it in the past year, nor will we be able to change it without breaking changes to customers.
+  - code: PutRequestResponseSchemeArm
+    from: EntityQueries.json
+    reason: This API is published to customers and we have not changed it in the past year, nor will we be able to change it without breaking changes to customers.
+  - code: DeleteResponseCodes
+    from: FileImports.json
+    reason: This API is published to customers and we have not changed it in the past year, nor will we be able to change it without breaking changes to customers.
 ```
 
 ### Tag: package-2025-06-01