--- a/tools/clang-tidy/config.yaml
+++ b/tools/clang-tidy/config.yaml
@@ -5,18 +5,34 @@ target: obj-x86_64-pc-linux-gnu
 # All the clang checks used by the static-analysis tools.
 clang_checkers:
  - name: -*
    publish: !!bool no
  - name: bugprone-forward-declaration-namespace
    publish: !!bool yes
  - name: clang-analyzer-deadcode.DeadStores
    publish: !!bool yes
- - name: clang-analyzer-security.*
+ - name: clang-analyzer-security.FloatLoopCounter
+   publish: !!bool yes
+ - name: clang-analyzer-security.UncheckedReturn
+   publish: !!bool yes
+ - name: clang-analyzer-security.insecureAPI.getpw
+   publish: !!bool yes
+ - name: clang-analyzer-security.insecureAPI.gets
+   publish: !!bool yes
+ - name: clang-analyzer-security.insecureAPI.mkstemp
+   publish: !!bool yes
+ - name: clang-analyzer-security.insecureAPI.mktemp
+   publish: !!bool yes
+ - name: clang-analyzer-security.insecureAPI.rand
+   publish: !!bool yes
+ - name: clang-analyzer-security.insecureAPI.strcpy
    publish: !!bool no
+ - name: clang-analyzer-security.insecureAPI.vfork
+   publish: !!bool yes
  - name: misc-argument-comment
    publish: !!bool yes
  - name: misc-assert-side-effect
    publish: !!bool yes
  - name: misc-suspicious-missing-comma
    publish: !!bool yes
  - name: misc-suspicious-semicolon
    publish: !!bool yes