diff --git a/app.py b/app.py
index ae49d10..f6be5c8 100644
--- a/app.py
+++ b/app.py
@@ -466,4 +466,4 @@ def health():
 
 
 if __name__ == '__main__':
-    app.run(debug=True, host='0.0.0.0', port=5000)
+    app.run(debug=True, host='0.0.0.0', port=5000)  # nosec B201 — dev runner only; production uses gunicorn