diff --git a/cli/azd/cmd/deps_record.go b/cli/azd/cmd/deps_record.go
index d7dc2f9ebe8..11f6998617b 100644
--- a/cli/azd/cmd/deps_record.go
+++ b/cli/azd/cmd/deps_record.go
@@ -18,8 +18,6 @@ import (
 
 func createHttpClient() *http.Client {
 	transport := http.DefaultTransport.(*http.Transport).Clone()
-	// Allow for self-signed certificates, which is what the recording proxy uses.
-	transport.TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
 	// AZD_TEST_HTTPS_PROXY is the proxy setting that only affects azd in record mode.
 	// This is useful since the recording proxy server isn't trusted by other processes currently.
 	if val, ok := os.LookupEnv("AZD_TEST_HTTPS_PROXY"); ok {
@@ -29,12 +27,14 @@ func createHttpClient() *http.Client {
 		}
 
 		transport.Proxy = http.ProxyURL(proxyUrl)
-		http.DefaultTransport = transport
+		// The recording proxy uses a self-signed certificate, so we must skip TLS verification.
+		// This code only compiles under the "record" build tag and never runs in production.
+		transport.TLSClientConfig = &tls.Config{
+			InsecureSkipVerify: true,
+		}
 	}
 
-	http.DefaultClient.Transport = transport
-
-	return http.DefaultClient
+	return &http.Client{Transport: transport}
 }
 
 func createClock() clock.Clock {
@@ -59,4 +59,4 @@ func fixedClock() (clock.Clock, bool) {
 
 	mockClock.Set(time.Unix(unixSec, 0))
 	return mockClock, true
-}
+}
\ No newline at end of file
diff --git a/cli/azd/extensions/azure.ai.agents/internal/cmd/debug.go b/cli/azd/extensions/azure.ai.agents/internal/cmd/debug.go
index 9d0814b76e1..f60e0fd2d8d 100644
--- a/cli/azd/extensions/azure.ai.agents/internal/cmd/debug.go
+++ b/cli/azd/extensions/azure.ai.agents/internal/cmd/debug.go
@@ -31,11 +31,8 @@ func setupDebugLogging(flags *pflag.FlagSet) func() {
 		return func() {}
 	}
 
-	currentDate := time.Now().Format("2006-01-02")
-	logFileName := fmt.Sprintf("azd-ai-agents-%s.log", currentDate)
-
-	//nolint:gosec // log file name is generated locally from date and not user-controlled
-	logFile, err := os.OpenFile(logFileName, os.O_CREATE|os.O_WRONLY|os.O_APPEND, 0600)
+	logFileName := fmt.Sprintf("azd-ai-agents-%s.log", time.Now().Format("2006-01-02"))
+	logFile, err := os.OpenFile(logFileName, os.O_CREATE|os.O_WRONLY|os.O_APPEND, 0600) //nolint:gosec // path derived from time.Now(), not user input
 
 	var w io.Writer
 	var closeFile func()
@@ -68,4 +65,4 @@ func isDebug(flags *pflag.FlagSet) bool {
 
 	debug, _ := strconv.ParseBool(os.Getenv("AZD_EXT_DEBUG"))
 	return debug
-}
+}
\ No newline at end of file