diff --git a/internal/apimodules/raffle/pick.go b/internal/apimodules/raffle/pick.go
index c129f5e..39281d0 100644
--- a/internal/apimodules/raffle/pick.go
+++ b/internal/apimodules/raffle/pick.go
@@ -57,7 +57,7 @@ func (cryptRandSrc) Int63() int64 {
 		return -1
 	}
 	// mask off sign bit to ensure positive number
-	return int64(binary.LittleEndian.Uint64(b[:]) & (1<<63 - 1))
+	return int64(binary.LittleEndian.Uint64(b[:]) & (1<<63 - 1)) //#nosec:G115 - Masking ensures conversion is fine
 }
 
 // We're using a non-seedable source