diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
index 91e03c1..69371a7 100644
--- a/.github/workflows/goreleaser.yml
+++ b/.github/workflows/goreleaser.yml
@@ -28,7 +28,7 @@ jobs:
         shell: bash            
       -
         name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@v7
         with:
           # either 'goreleaser' (default) or 'goreleaser-pro'
           distribution: goreleaser
diff --git a/internal/app/edit.go b/internal/app/edit.go
index 9ab72c8..1d354ff 100644
--- a/internal/app/edit.go
+++ b/internal/app/edit.go
@@ -25,7 +25,7 @@ func Edit(ctx context.Context, number int) error {
 
 	log.Printf("editing ADR: %v", filepath.Join(conf.Root, found.Filename))
 
-	// #nosec G204
+	// #nosec G204,G702 // Command injection via environment variable
 	cmd := exec.CommandContext(ctx, os.Getenv("EDITOR"), filepath.Join(conf.Project, conf.Root, found.Filename))
 	cmd.Stdin = os.Stdin
 	cmd.Stdout = os.Stdout