diff --git a/.changelog/247.txt b/.changelog/247.txt
new file mode 100644
index 00000000..7380ca12
--- /dev/null
+++ b/.changelog/247.txt
@@ -0,0 +1,3 @@
+```release-note:note
+`resource/davinci_flow`: Address code scanning advisories.
+```
diff --git a/internal/service/davinci/resource_flow.go b/internal/service/davinci/resource_flow.go
index fbb51212..c0fcb0ac 100644
--- a/internal/service/davinci/resource_flow.go
+++ b/internal/service/davinci/resource_flow.go
@@ -777,7 +777,8 @@ func mapSubFlows(d *schema.ResourceData, flowJson string) (*string, error) {
 						// sfProp.SubFlowVersionID.Value = sfValues["subflow_version"].(string)
 					}
 				}
-				err = mapstructure.Decode(sfProp, &v.Data.Properties)
+				properties := v.Data.Properties // G601 (CWE-118)
+				err = mapstructure.Decode(sfProp, &properties)
 				if err != nil {
 					return nil, err
 				}