diff --git a/internal/getproviders/package_authentication.go b/internal/getproviders/package_authentication.go
index 32e907dee..4ebb8da6f 100644
--- a/internal/getproviders/package_authentication.go
+++ b/internal/getproviders/package_authentication.go
@@ -9,6 +9,9 @@ import (
 	"log"
 	"strings"
 
+	// TODO: replace crypto/openpgp since it is deprecated
+	// https://github.com/golang/go/issues/44226
+	//lint:file-ignore SA1019 openpgp is deprecated but there are no good alternatives yet
 	"golang.org/x/crypto/openpgp"
 	openpgpArmor "golang.org/x/crypto/openpgp/armor"
 	openpgpErrors "golang.org/x/crypto/openpgp/errors"
diff --git a/internal/getproviders/package_authentication_test.go b/internal/getproviders/package_authentication_test.go
index 06b7621e5..45052b75d 100644
--- a/internal/getproviders/package_authentication_test.go
+++ b/internal/getproviders/package_authentication_test.go
@@ -9,6 +9,10 @@ import (
 	"testing"
 
 	"github.com/google/go-cmp/cmp"
+
+	// TODO: replace crypto/openpgp since it is deprecated
+	// https://github.com/golang/go/issues/44226
+	//lint:file-ignore SA1019 openpgp is deprecated but there are no good alternatives yet
 	"golang.org/x/crypto/openpgp"
 )