dir-or-file-outside-snapshot
explicit-lib-dependency
missing-call-to-setgroups-before-setuid