diff --git a/.golangci.yml b/.golangci.yml
index 1aeced02b..37830c6b2 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -8,14 +8,20 @@ linters-settings:
   staticcheck:
     checks:
       - all
-      - '-SA1019' # it is okay to use math/rand at times
+      - '-SA1019' # it is okay to use math/rand at times.
+  gosec:
+    excludes: # these are not relevant for us right now
+      - G114
+      - G204
+      - G306
+      - G404
 
 linters:
   disable-all: true
   enable:
     - errcheck
     - ineffassign
-    # - gas
+    - gosec
     - gofmt
     - gosimple
     - govet
diff --git a/badger/main.go b/badger/main.go
index 3d8b2cc05..0f3d154f3 100644
--- a/badger/main.go
+++ b/badger/main.go
@@ -19,7 +19,7 @@ package main
 import (
 	"fmt"
 	"net/http"
-	_ "net/http/pprof"
+	_ "net/http/pprof" //nolint:gosec
 	"runtime"
 
 	"github.com/dustin/go-humanize"
diff --git a/integration/testgc/main.go b/integration/testgc/main.go
index 3a16d6158..c65184855 100644
--- a/integration/testgc/main.go
+++ b/integration/testgc/main.go
@@ -6,7 +6,7 @@ import (
 	"log"
 	"math/rand"
 	"net/http"
-	_ "net/http/pprof"
+	_ "net/http/pprof" //nolint:gosec
 	"os"
 	"sync"
 	"sync/atomic"