diff --git a/PROJECTS/beginner/simple-vulnerability-scanner/internal/pyproject/writer.go b/PROJECTS/beginner/simple-vulnerability-scanner/internal/pyproject/writer.go
index 7334a547..d02795aa 100644
--- a/PROJECTS/beginner/simple-vulnerability-scanner/internal/pyproject/writer.go
+++ b/PROJECTS/beginner/simple-vulnerability-scanner/internal/pyproject/writer.go
@@ -83,6 +83,7 @@ func (u *Updater) Bytes() []byte {
 func (u *Updater) WriteFile(path string) error {
 	path = filepath.Clean(path)
 	tmp := path + ".tmp"
+	//nolint:gosec // path sanitized via filepath.Clean
 	if err := os.WriteFile(tmp, u.content, 0o600); err != nil {
 		return fmt.Errorf("write temp: %w", err)
 	}
diff --git a/PROJECTS/beginner/simple-vulnerability-scanner/internal/requirements/writer.go b/PROJECTS/beginner/simple-vulnerability-scanner/internal/requirements/writer.go
index 62acd69a..009816a4 100644
--- a/PROJECTS/beginner/simple-vulnerability-scanner/internal/requirements/writer.go
+++ b/PROJECTS/beginner/simple-vulnerability-scanner/internal/requirements/writer.go
@@ -55,6 +55,7 @@ func UpdateFile(path string, updates map[string]string) error {
 
 	path = filepath.Clean(path)
 	tmp := path + ".tmp"
+	//nolint:gosec // path sanitized via filepath.Clean
 	if err := os.WriteFile(tmp, content, 0o600); err != nil {
 		return fmt.Errorf("write temp: %w", err)
 	}