diff --git a/cmd/headscale/cli/utils.go b/cmd/headscale/cli/utils.go
index 84ff977b..9a3f84d8 100644
--- a/cmd/headscale/cli/utils.go
+++ b/cmd/headscale/cli/utils.go
@@ -418,13 +418,15 @@ func getHeadscaleCLIClient() (context.Context, v1.HeadscaleServiceClient, *grpc.
 
 		if cfg.CLI.Insecure {
 			tlsConfig := &tls.Config{
+				// turn of gosec as we are intentionally setting
+				// insecure.
+				//nolint:gosec
 				InsecureSkipVerify: true,
 			}
 
 			grpcOptions = append(grpcOptions,
 				grpc.WithTransportCredentials(credentials.NewTLS(tlsConfig)),
 			)
-
 		} else {
 			grpcOptions = append(grpcOptions,
 				grpc.WithTransportCredentials(credentials.NewClientTLSFromCert(nil, "")),