diff --git a/integration/build/build_session_test.go b/integration/build/build_session_test.go
index d1219c79f5..7c626416a1 100644
--- a/integration/build/build_session_test.go
+++ b/integration/build/build_session_test.go
@@ -89,6 +89,7 @@ func TestBuildWithSession(t *testing.T) {
 	assert.Check(t, is.Equal(du.BuilderSize, int64(0)))
 }
 
+//nolint:unused // false positive: linter detects this as "unused"
 func testBuildWithSession(t *testing.T, client dclient.APIClient, daemonHost string, dir, dockerfile string) (outStr string) {
 	ctx := context.Background()
 	sess, err := session.NewSession(ctx, "foo1", "foo")
diff --git a/integration/container/checkpoint_test.go b/integration/container/checkpoint_test.go
index 88ecce18b6..fb37fcea60 100644
--- a/integration/container/checkpoint_test.go
+++ b/integration/container/checkpoint_test.go
@@ -20,6 +20,7 @@ import (
 	"gotest.tools/v3/skip"
 )
 
+//nolint:unused // false positive: linter detects this as "unused"
 func containerExec(t *testing.T, client client.APIClient, cID string, cmd []string) {
 	t.Logf("Exec: %s", cmd)
 	ctx := context.Background()
diff --git a/integration/network/service_test.go b/integration/network/service_test.go
index 6fc71fab7b..bff45c0909 100644
--- a/integration/network/service_test.go
+++ b/integration/network/service_test.go
@@ -292,6 +292,7 @@ func TestServiceRemoveKeepsIngressNetwork(t *testing.T) {
 	assert.Assert(t, ok, "ingress-sbox not present in ingress network")
 }
 
+//nolint:unused // for some reason, the "unused" linter marks this function as "unused"
 func swarmIngressReady(client client.NetworkAPIClient) func(log poll.LogT) poll.Result {
 	return func(log poll.LogT) poll.Result {
 		netInfo, err := client.NetworkInspect(context.Background(), ingressNet, types.NetworkInspectOptions{