linting

api/pkg/vault/kv/service.go

@@ -161,6 +161,7 @@ func resolveToken(config Config) (string, string, error) {
 		}
 	}
 	if tokenFilePath != "" {
+		//nolint:gosec // Token file path comes from trusted deployment configuration.
 		raw, err := os.ReadFile(tokenFilePath)
 		if err != nil {
 			return "", "", merrors.Internal("vault kv: failed to read token file " + tokenFilePath + ": " + err.Error())