diff --git a/.golangci.yml b/.golangci.yml
index 25eb562..f60a998 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -13,3 +13,21 @@ issues:
   exclude-dirs:
     - cmd/panel
     - cmd/icongen
+  exclude-rules:
+    # defer body.Close() — safe pattern, return value is irrelevant
+    - linters: [errcheck]
+      source: "defer .+\\.Close\\(\\)"
+    # resp.Body.Close in non-defer context (checked via HTTP status already)
+    - linters: [errcheck]
+      source: "\\.Body\\.Close\\(\\)"
+    # systray menu.ShowMenu has no meaningful error
+    - linters: [errcheck]
+      path: internal/tray/
+      source: "ShowMenu"
+    # binary.Write in ICO header encoding — panic-level errors only
+    - linters: [errcheck]
+      path: internal/icons/render\.go
+      source: "binary\\.Write"
+    # Setup binary is a CLI wizard; best-effort error handling is acceptable
+    - linters: [errcheck, gosec]
+      path: cmd/setup/