diff --git a/pkg/workflow/semver.go b/pkg/workflow/semver.go
index 814220b3ec..4db01af43f 100644
--- a/pkg/workflow/semver.go
+++ b/pkg/workflow/semver.go
@@ -55,7 +55,8 @@ func extractMajorVersion(version string) int {
 	parts := strings.Split(v, ".")
 	if len(parts) > 0 {
 		var major int
-		_, _ = fmt.Sscanf(parts[0], "%d", &major) // Ignore error, defaults to 0 for non-numeric parts
+		// #nosec G104 - Intentionally ignoring Sscanf error as function defaults to 0 for non-numeric version parts
+		_, _ = fmt.Sscanf(parts[0], "%d", &major)
 		return major
 	}