diff --git a/pkg/issuer/acme/dns/rfc2136/tsig.go b/pkg/issuer/acme/dns/rfc2136/tsig.go
index 15a997091..890553e2c 100644
--- a/pkg/issuer/acme/dns/rfc2136/tsig.go
+++ b/pkg/issuer/acme/dns/rfc2136/tsig.go
@@ -22,7 +22,7 @@ package rfc2136
 import (
 	"crypto/hmac"
 	"crypto/md5"
-	"crypto/sha1"
+	"crypto/sha1" // #nosec G505 -- SHA1 is a supported TSIG Algorithm
 	"crypto/sha256"
 	"crypto/sha512"
 	"encoding/base64"
diff --git a/pkg/issuer/acme/dns/rfc2136/tsig_test.go b/pkg/issuer/acme/dns/rfc2136/tsig_test.go
index 7d9732194..8af52f68b 100644
--- a/pkg/issuer/acme/dns/rfc2136/tsig_test.go
+++ b/pkg/issuer/acme/dns/rfc2136/tsig_test.go
@@ -22,7 +22,7 @@ package rfc2136
 import (
 	"crypto/hmac"
 	"crypto/md5"
-	"crypto/sha1"
+	"crypto/sha1" // #nosec G505 -- SHA1 is a supported TSIG Algorithm
 	"crypto/sha256"
 	"crypto/sha512"
 	"encoding/base64"