Now that the workflow is in place after #984 and the most severe reports are fixed, there are different follow-up tasks here:

1. identifying the rules we really want to comply to;
2. find a way to silence the rules we do not want to take into account;
3. update the codebase to gradually remove the remaining reports.