diff --git a/pkg/sbomscanner-ui-ext/edit/__tests__/sbomscanner.kubewarden.io.registry.spec.ts b/pkg/sbomscanner-ui-ext/edit/__tests__/sbomscanner.kubewarden.io.registry.spec.ts
index d702bfa..c97fc0b 100644
--- a/pkg/sbomscanner-ui-ext/edit/__tests__/sbomscanner.kubewarden.io.registry.spec.ts
+++ b/pkg/sbomscanner-ui-ext/edit/__tests__/sbomscanner.kubewarden.io.registry.spec.ts
@@ -34,7 +34,7 @@ const stubs = {
   Banner:            { name: 'Banner', template: '<div><slot /></div>' },
   LabeledSelect:     LabeledSelectStub,
   Checkbox:          {
-    name: 'Checkbox', template: '<input type="checkbox" :checked="value" @change="$emit(\'update:value\', $event.target.checked)" />', props: ['value']
+    name: 'Checkbox', template: '<input type="checkbox" :checked="value" @change="$emit(\'update:value\', $event.target.checked)" />', props: ['value', 'label', 'tooltip']
   },
   FileSelector: { name: 'FileSelector', template: '<button @click="$emit(\'selected\', \'file-content\')">Read</button>' }
 };
diff --git a/pkg/sbomscanner-ui-ext/edit/sbomscanner.kubewarden.io.registry.vue b/pkg/sbomscanner-ui-ext/edit/sbomscanner.kubewarden.io.registry.vue
index 2281a2b..2c76b01 100644
--- a/pkg/sbomscanner-ui-ext/edit/sbomscanner.kubewarden.io.registry.vue
+++ b/pkg/sbomscanner-ui-ext/edit/sbomscanner.kubewarden.io.registry.vue
@@ -383,7 +383,7 @@ export default {
           />
           <div class="mt-10">
             <FileSelector
-                class="btn btn-sm role-secondary"
+                class="btn btn-sm role-tertiary"
                 :label="t('generic.readFromFile')"
                 @selected="onFileSelected"
             />
@@ -394,6 +394,7 @@ export default {
             <Checkbox
                 v-model:value="value.spec.insecure"
                 :label="t('imageScanner.registries.configuration.cru.registry.insecure.label')"
+                :tooltip="t('imageScanner.registries.configuration.cru.registry.insecure.tooltip')"
                 data-testid="auth-insecure-checkbox"
             />
           </div>
@@ -542,7 +543,7 @@ export default {
           <button
               v-if="!isView"
               type="button"
-              class="btn role-secondary btn-sm"
+              class="btn btn-sm role-tertiary"
               @click="addPlatform"
           >
             {{ t('imageScanner.registries.configuration.cru.filters.add') }}
diff --git a/pkg/sbomscanner-ui-ext/l10n/en-us.yaml b/pkg/sbomscanner-ui-ext/l10n/en-us.yaml
index 67c9f4b..8363219 100644
--- a/pkg/sbomscanner-ui-ext/l10n/en-us.yaml
+++ b/pkg/sbomscanner-ui-ext/l10n/en-us.yaml
@@ -113,6 +113,7 @@ imageScanner:
             placeholder: "You can enter this manually or import it from a file using the button below."
           insecure:
             label: "Allow insecure connections"
+            tooltip: "Skips SSL/TLS certificate verification. Use only for testing or trusted internal networks."
         proxy:
           enable: Use the embedded proxy
           tooltip: "When enabled, Rancher routes all registry traffic through its secure proxy instead of direct connections."