diff --git a/toxics/limit_data_test.go b/toxics/limit_data_test.go
index 881d4ca4..4c04420d 100644
--- a/toxics/limit_data_test.go
+++ b/toxics/limit_data_test.go
@@ -11,6 +11,7 @@ import (
 
 func buffer(size int) []byte {
 	buf := make([]byte, size)
+	// #nosec G404 -- used only in tests
 	rand.Read(buf)
 
 	return buf
diff --git a/toxics/toxic_test.go b/toxics/toxic_test.go
index b8a123a1..d7c9ed7a 100644
--- a/toxics/toxic_test.go
+++ b/toxics/toxic_test.go
@@ -366,6 +366,7 @@ func TestToxicStub_WriteOutput(t *testing.T) {
 	stub := toxics.NewToxicStub(input, output)
 
 	buf := make([]byte, 42)
+	// #nosec G404 -- used only in tests
 	rand.Read(buf)
 
 	t.Run("when no read in 1 second", func(t *testing.T) {