[rpms/gcc] rhel-f41-base: Make rpminspect in CI less loud

[rpms/gcc] rhel-f41-base: Make rpminspect in CI less loud

[@ 2026-06-29 12:30 UTC (permalink / raw)]

            A new commit has been pushed.

            Repo   : rpms/gcc
            Branch : rhel-f41-base
            Commit : d35dbeca6690f70744ed3822ffdd684c63f11c02
            Author : Václav Kadlčík <vkadlcik@redhat.com>
            Date   : 2025-08-13T07:54:14+02:00
            Stats  : +37/-0 in 1 file(s)
            URL    : https://src.fedoraproject.org/rpms/gcc/c/d35dbeca6690f70744ed3822ffdd684c63f11c02?branch=rhel-f41-base

            Log:
            Make rpminspect in CI less loud

Configure exceptions for  rpminspect
(fedora-ci.koji-build.rpminspect.static-analysis in Fedora CI) so the
reports don't overwhelm us with failures (be it false ones or genuine
ones that we are OK with).

---
diff --git a/rpminspect.yaml b/rpminspect.yaml
new file mode 100644
index 0000000..f31bc02
--- /dev/null
+++ b/rpminspect.yaml
@@ -0,0 +1,37 @@
+inspections:
+    # GCC subpackages are inter-dependent but without requesting an explicit
+    # version - which rpmdeps dislikes and creates huge reports. We can't fix
+    # it easily and it's not a practical problem anyway. Unfortunately we
+    # can't tell rpmdeps to ignore just that particular warning. Switching off
+    # the rpmdeps checks looks like a lesser evil.
+    rpmdeps: off
+
+badfuncs:
+    # GCC doesn't use the so called bad functions "much". If they appear then
+    # - it is instrumenting them in sanitizers
+    # - in languages that don't move further downstream.
+    # We are OK with that.
+    ignore:
+      - /usr/lib*/libasan.so.*.*.*
+      - /usr/lib*/libtsan.so.*.*.*
+      - /usr/lib*/libgnat-*.so
+      - /usr/lib*/libgphobos.so.*.*.*
+      - /usr/lib*/libm2iso.so.*.*.*
+      - /usr/lib*/libm2pim.so.*.*.*
+
+pathmigration:
+    # Incomplete UsrMove, known but not planned at the moment
+    ignore:
+      - /lib*/libgcc_s-*.so.*
+      - /lib*/libgcc_s.so.*
+
+debuginfo:
+    # Skip the Go binaries, they ship unstripped
+    ignore:
+      - /usr/bin/go.gcc
+      - /usr/bin/gofmt.gcc
+      - /usr/lib*/libgo.so.*.*.*
+      - /usr/libexec/gcc/*-redhat-linux/*/buildid
+      - /usr/libexec/gcc/*-redhat-linux/*/cgo
+      - /usr/libexec/gcc/*-redhat-linux/*/test2json
+      - /usr/libexec/gcc/*-redhat-linux/*/vet