diff --git a/app/terraform/proxy/meta.py b/app/terraform/proxy/meta.py
index c9b177b..a9aebf5 100644
--- a/app/terraform/proxy/meta.py
+++ b/app/terraform/proxy/meta.py
@@ -70,7 +70,7 @@ class ProxyMetaAutomation(BaseAutomation):
 
     def automate(self, full: bool = False) -> Tuple[bool, str]:
         # Deprecate orphaned proxies, old proxies and mismatched proxies
-        proxies = Proxy.query.filter(
+        proxies: List[Proxy] = Proxy.query.filter(
             Proxy.deprecated.is_(None),
             Proxy.destroyed.is_(None),
         ).all()
@@ -78,9 +78,9 @@ class ProxyMetaAutomation(BaseAutomation):
             if proxy.origin.destroyed is not None:
                 proxy.deprecate(reason="origin_destroyed")
             if proxy.origin_id in current_app.config.get("DAILY_REPLACEMENT_ORIGINS", []):
-                max_age_cutoff = datetime.datetime.utcnow() - datetime.timedelta(days=1, seconds=86400 * random.random())
+                max_age_cutoff = datetime.datetime.utcnow() - datetime.timedelta(days=1, seconds=86400 * random.random())  # nosec: B311
             else:
-                max_age_cutoff = datetime.datetime.utcnow() - datetime.timedelta(days=5, seconds=86400 * random.random())
+                max_age_cutoff = datetime.datetime.utcnow() - datetime.timedelta(days=5, seconds=86400 * random.random())  # nosec: B311
             if proxy.added < max_age_cutoff:
                 proxy.deprecate(reason="max_age_reached")
             if proxy.origin.smart and not PROXY_PROVIDERS[proxy.provider].smart_proxies:  # type: ignore[attr-defined]
@@ -101,7 +101,7 @@ class ProxyMetaAutomation(BaseAutomation):
                         create_proxy(pool, origin)
         # Destroy expired proxies
         expiry_cutoff = datetime.datetime.utcnow() - datetime.timedelta(days=4)
-        proxies: List[Proxy] = Proxy.query.filter(
+        proxies = Proxy.query.filter(
             Proxy.destroyed.is_(None),
             Proxy.deprecated < expiry_cutoff
         ).all()