diff --git a/src/Storages/MergeTree/MergeTreeIndexAnnoy.h b/src/Storages/MergeTree/MergeTreeIndexAnnoy.h
index d2765f10a22..ae4419f9657 100644
--- a/src/Storages/MergeTree/MergeTreeIndexAnnoy.h
+++ b/src/Storages/MergeTree/MergeTreeIndexAnnoy.h
@@ -4,8 +4,10 @@
 
 #include <Storages/MergeTree/ApproximateNearestNeighborIndexesCommon.h>
 
+// NOLINTBEGIN(clang-analyzer-unix.Malloc)
 #include <annoylib.h>
 #include <kissrandom.h>
+// NOLINTEND(clang-analyzer-unix.Malloc)
 
 namespace DB
 {
diff --git a/utils/self-extracting-executable/decompressor.cpp b/utils/self-extracting-executable/decompressor.cpp
index 967e21dac15..c20c1f0cbb2 100644
--- a/utils/self-extracting-executable/decompressor.cpp
+++ b/utils/self-extracting-executable/decompressor.cpp
@@ -243,27 +243,27 @@ int decompressFiles(int input_fd, char * path, char * name, bool & have_compress
         memset(file_name, '\0', file_path_len);
         if (path)
         {
-            strcat(file_name, path);
-            strcat(file_name, "/");
+            strcat(file_name, path); // NOLINT(clang-analyzer-security.insecureAPI.strcpy)
+            strcat(file_name, "/"); // NOLINT(clang-analyzer-security.insecureAPI.strcpy)
         }
 
         bool same_name = false;
         if (file_info.exec)
         {
             has_exec = true;
-            strcat(file_name, name);
+            strcat(file_name, name); // NOLINT(clang-analyzer-security.insecureAPI.strcpy)
         }
         else
         {
             if (strcmp(name, input + files_pointer) == 0)
                 same_name = true;
-            strcat(file_name, input + files_pointer);
+            strcat(file_name, input + files_pointer); // NOLINT(clang-analyzer-security.insecureAPI.strcpy)
         }
 
         files_pointer += le64toh(file_info.name_length);
         if (file_info.exec || same_name)
         {
-            strcat(file_name, ".decompressed.XXXXXX");
+            strcat(file_name, ".decompressed.XXXXXX"); // NOLINT(clang-analyzer-security.insecureAPI.strcpy)
             int fd = mkstemp(file_name);
             if (fd == -1)
             {
@@ -411,7 +411,7 @@ int main(int/* argc*/, char* argv[])
     }
 
     char file_path[strlen(self) + 1];
-    strcpy(file_path, self);
+    strcpy(file_path, self); // NOLINT(clang-analyzer-security.insecureAPI.strcpy)
 
     char * path = nullptr;
     char * name = strrchr(file_path, '/');