diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index fe7226e9bbb4a..897f3e61dc4a7 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -14,6 +14,9 @@ jobs:
   golangci:
     name: golangci-lint
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        mode: [no-failure, no-deprecations]
     steps:
       - uses: actions/setup-go@v3
         with:
@@ -24,3 +27,6 @@ jobs:
         with:
           # Optional: version of golangci-lint to use in form of v1.2 or v1.2.3 or `latest` to use the latest version
           version: v1.49.0
+          args:
+            ${{ matrix.mode == 'no-deprecations' && '--exclude=^SA1019' || '' }}
+            ${{ matrix.mode == 'no-failure' && '--issues-exit-code=0' || '' }}
diff --git a/crypto/keyring/keyring.go b/crypto/keyring/keyring.go
index 91b1ca0f9ae5e..ad08ffd79b09f 100644
--- a/crypto/keyring/keyring.go
+++ b/crypto/keyring/keyring.go
@@ -719,7 +719,7 @@ func newRealPrompt(dir string, buf io.Reader) func(string) (string, error) {
 				continue
 			}
 
-			// nolint:gosec // ignore gosec G306: Expect WriteFile permissions to be 0600 or less
+			// [AGORIC] unused for linter "gosec" // nolint:gosec // ignore gosec G306: Expect WriteFile permissions to be 0600 or less
 			if err := os.WriteFile(dir+"/keyhash", passwordHash, 0o555); err != nil {
 				return "", err
 			}