diff --git a/.golangci.yml b/.golangci.yml
index 07e2f80..3bfab15 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -14,7 +14,7 @@ linters:
     rules:
       # binary.Write in ICO header encoding — panic-level errors only
       - path: internal/icons/render\.go
-        linters: [errcheck]
+        linters: [errcheck, gosec]
         source: "binary\\.Write"
       # systray menu.ShowMenu has no meaningful error
       - path: internal/tray/