diff --git a/.clang-tidy b/.clang-tidy
index 35a4fe7b5..041e5dc0d 100644
--- a/.clang-tidy
+++ b/.clang-tidy
@@ -30,7 +30,9 @@ Checks: >
   clang-analyzer-*,
   -clang-analyzer-optin.cplusplus.UninitializedObject,
   -clang-analyzer-optin.cplusplus.VirtualCall,
+  -clang-analyzer-optin.osx.cocoa.localizability.NonLocalizedStringChecker,
   -clang-analyzer-optin.performance.Padding,
+  -clang-analyzer-osx.cocoa.RetainCount,
   -clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling,
   -clang-analyzer-security.insecureAPI.rand,
   misc-*,
diff --git a/src/base/system.cpp b/src/base/system.cpp
index d2a358b31..52a1464f6 100644
--- a/src/base/system.cpp
+++ b/src/base/system.cpp
@@ -2440,7 +2440,7 @@ int net_socket_read_wait(NETSOCKET sock, int time)
 	tv.tv_usec = time % 1000000;
 	sockid = 0;
 
-	FD_ZERO(&readfds);
+	FD_ZERO(&readfds); // NOLINT(clang-analyzer-security.insecureAPI.bzero)
 	if(sock.ipv4sock >= 0)
 	{
 		FD_SET(sock.ipv4sock, &readfds);