diff --git a/runner/runner.go b/runner/runner.go
index 235f4350..4cf45ba3 100644
--- a/runner/runner.go
+++ b/runner/runner.go
@@ -17,7 +17,7 @@ package runner
 import (
 	"context"
 	"crypto/hmac"
-	"crypto/sha1"
+	"crypto/sha1" //nolint:golangci-lint,gosec // sha1 is used for github webhooks
 	"crypto/sha256"
 	"encoding/hex"
 	"encoding/json"