diff --git a/cmd/bd/daemon_health_unix.go b/cmd/bd/daemon_health_unix.go
index 1b345140..de1a220d 100644
--- a/cmd/bd/daemon_health_unix.go
+++ b/cmd/bd/daemon_health_unix.go
@@ -15,7 +15,8 @@ func checkDiskSpace(path string) (uint64, bool) {
 	}
 
 	// Calculate available space in bytes, then convert to MB
-	availableBytes := stat.Bavail * uint64(stat.Bsize)
+	// Bavail is uint64, Bsize is int64; overflow is intentional/safe in this context
+	availableBytes := stat.Bavail * uint64(stat.Bsize) //nolint:gosec
 	availableMB := availableBytes / (1024 * 1024)
 
 	return availableMB, true
diff --git a/cmd/bd/main.go b/cmd/bd/main.go
index ff82da58..5d2b21da 100644
--- a/cmd/bd/main.go
+++ b/cmd/bd/main.go
@@ -296,7 +296,8 @@ var rootCmd = &cobra.Command{
 					}
 
 					isNoDbMode := false
-					if configData, err := os.ReadFile(configPath); err == nil {
+					// configPath is safe: constructed from filepath.Join(beadsDir, hardcoded name)
+					if configData, err := os.ReadFile(configPath); err == nil { //nolint:gosec
 						isNoDbMode = strings.Contains(string(configData), "no-db: true")
 					}