See #103699 (comment) for context

the tsec-compile-check action currently has a many outputs, making it difficult to notice when new security-sensitive code is added.

by listing all of the current violations in the tsec exemption file we can ensure that the output of tsec-compile-check stays empty unless someone adds code with a new violation.