diff --git a/internal/cli/cert.go b/internal/cli/cert.go
index 02997ac..e95167f 100644
--- a/internal/cli/cert.go
+++ b/internal/cli/cert.go
@@ -13,7 +13,8 @@ import (
 )
 
 const (
-	certManagerNamespace            = "cert-manager"
+	certManagerNamespace = "cert-manager"
+	// #nosec G101 -- This is the name of a Kubernetes secret resource, not actual credentials
 	certCASecretName                = "mcp-runtime-ca"
 	certClusterIssuerName           = "mcp-runtime-ca"
 	registryCertificateName         = "registry-cert"