diff --git a/scripts/wrappers/distributed_op.py b/scripts/wrappers/distributed_op.py
index 939ac3fc0a..38c5331241 100644
--- a/scripts/wrappers/distributed_op.py
+++ b/scripts/wrappers/distributed_op.py
@@ -106,7 +106,7 @@ def do_configure_op(remote_op):
             res = requests.post(
                 "https://{}/{}/configure".format(node_ep, CLUSTER_API_V1),
                 json=remote_op,
-                verify=False,
+                verify=False,  # nosec B501
             )
             if res.status_code != 200:
                 print(
@@ -141,7 +141,7 @@ def do_image_import(image_data):
                 headers={
                     "x-microk8s-callback-token": token,
                 },
-                verify=False,
+                verify=False,  # nosec B501
             )
 
             if res.status_code != 200:
diff --git a/scripts/wrappers/join.py b/scripts/wrappers/join.py
index 89122e95f3..4ca58b9e2e 100755
--- a/scripts/wrappers/join.py
+++ b/scripts/wrappers/join.py
@@ -210,7 +210,7 @@ def get_etcd_client_cert(master_ip, master_port, token):
         signed = requests.post(
             "https://{}:{}/{}/sign-cert".format(master_ip, master_port, CLUSTER_API),
             json=req_data,
-            verify=False,
+            verify=False,  # nosec B501
         )
         if signed.status_code != 200:
             print("Failed to sign certificate. {}".format(signed.json()["error"]))
@@ -250,7 +250,7 @@ def get_client_cert(master_ip, master_port, fname: str, token: str, subject: str
     signed = requests.post(
         "https://{}:{}/{}/sign-cert".format(master_ip, master_port, CLUSTER_API),
         json=req_data,
-        verify=False,
+        verify=False,  # nosec B501
     )
     if signed.status_code != 200:
         error = "Failed to sign {} certificate ({}).".format(fname, signed.status_code)
diff --git a/scripts/wrappers/upgrade.py b/scripts/wrappers/upgrade.py
index c208f075af..30aae12588 100755
--- a/scripts/wrappers/upgrade.py
+++ b/scripts/wrappers/upgrade.py
@@ -46,7 +46,9 @@ def node_upgrade(upgrade, phase, node_ep, token):
             remote_op = {"callback": token, "phase": phase, "upgrade": upgrade}
             # TODO: handle ssl verification
             res = requests.post(
-                "https://{}/{}/upgrade".format(node_ep, CLUSTER_API), json=remote_op, verify=False
+                "https://{}/{}/upgrade".format(node_ep, CLUSTER_API),
+                json=remote_op,
+                verify=False,  # nosec B501
             )
             if res.status_code != 200:
                 print("Failed to perform a {} on node {}".format(remote_op["upgrade"], node_ep))
diff --git a/tests/test-cluster.py b/tests/test-cluster.py
index 61f533fdc0..826d3d6fa8 100644
--- a/tests/test-cluster.py
+++ b/tests/test-cluster.py
@@ -239,7 +239,10 @@ def run(self, cmd):
         elif self.backend == "lxc":
             cmd_prefix = "/snap/bin/lxc exec {}  -- ".format(self.vm_name)
             with subprocess.Popen(
-                cmd_prefix + cmd, shell=True, stdout=subprocess.PIPE, preexec_fn=os.setsid
+                cmd_prefix + cmd,
+                shell=True,
+                stdout=subprocess.PIPE,
+                preexec_fn=os.setsid,  # nosec B602
             ) as process:
                 try:
                     output = process.communicate(timeout=300)[0]