diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 4ef1c9f..1e3bb4b 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -23,7 +23,7 @@ jobs:
           go-version: 1.22
           cache: true
 
-      - uses: sigstore/cosign-installer@v3.5.0
+      - uses: sigstore/cosign-installer@v3.7.0
       - uses: anchore/sbom-action/download-syft@v0.17.0
 
       - uses: docker/login-action@v3
diff --git a/keyring/memory/memory.go b/keyring/memory/memory.go
index 9374c38..dfea1d7 100644
--- a/keyring/memory/memory.go
+++ b/keyring/memory/memory.go
@@ -22,6 +22,7 @@ func New(mnemonic string, numAccounts uint64) *Keyring {
 	seed := bip39.NewSeed(mnemonic, "")
 
 	for i := uint64(0); i < numAccounts; i++ {
+		//nolint:gosec // i ranges up to numAccounts which won't overflow uint32
 		key := generateKeyFromSeed(seed, uint32(i))
 		address := key.PubKey().Address()