diff --git a/src/rez/cli/release.py b/src/rez/cli/release.py
index 275f597ac..5419fd9f6 100644
--- a/src/rez/cli/release.py
+++ b/src/rez/cli/release.py
@@ -84,7 +84,7 @@ def command(opts, parser, extra_arg_groups=None):
     if config.prompt_release_message and not release_msg and not opts.no_message:
         from hashlib import sha1
 
-        h = sha1(working_dir.encode("utf8")).hexdigest()
+        h = sha1(working_dir.encode("utf8")).hexdigest()  # nosemgrep: insecure-hash-algorithm-sha1
         filename = "rez-release-message-%s.txt" % h
         filepath = os.path.join(config.tmpdir, filename)