# PIE breaks the build
nco: hardening-no-pie *

# False positive, string not included in source
nco: spelling-error-in-binary usr/lib/nco/libnco-*.so ot to

