diff --git a/backend/tests/integration/test_print_batch_orders.py b/backend/tests/integration/test_print_batch_orders.py
index c4d38f1f2..6ffe75485 100644
--- a/backend/tests/integration/test_print_batch_orders.py
+++ b/backend/tests/integration/test_print_batch_orders.py
@@ -49,7 +49,7 @@ async def archive_factory(db_session):
         defaults = {
             "filename": f"batch_order_{counter}.3mf",
             "print_name": f"Batch Order {counter}",
-            "file_path": f"/tmp/batch_order_{counter}.3mf",
+            "file_path": f"/tmp/batch_order_{counter}.3mf",  # nosec B108
             "file_size": 2048,
             "content_hash": f"batchhash{counter:08d}",
             "status": "completed",
diff --git a/backend/tests/unit/services/test_ftp_failed_connect_cleanup_2780.py b/backend/tests/unit/services/test_ftp_failed_connect_cleanup_2780.py
index 52997acae..e04685c8e 100644
--- a/backend/tests/unit/services/test_ftp_failed_connect_cleanup_2780.py
+++ b/backend/tests/unit/services/test_ftp_failed_connect_cleanup_2780.py
@@ -18,7 +18,7 @@ These tests assert the socket is closed, not merely dereferenced, because
 dereferencing is what the old code did and it looked identical from outside.
 """
 
-import ftplib
+import ftplib  # nosec B402 — tests need the real ftplib to construct its own error types
 import ssl
 from unittest.mock import MagicMock, patch