diff --git a/CHANGELOG.md b/CHANGELOG.md
index d695ddb..b1325db 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -23,6 +23,8 @@ A `### Breaking` section is used in addition to Keep a Changelog's standard sect
 
 ### Fixed
 
+- Hardened `coverage-gate` file input handling by validating and normalizing policy/profile paths before opening files, resolving `G304` findings in `coverage-gate/parse.go`.
+
 ## [1.1.0] - 2026-03-21
 
 ### Breaking