rpmgrill has support for whitelisting setxid binaries seen here: https://github.com/default-to-open/rpmgrill/blob/master/lib/RPM/Grill/Plugin/Setxid.pm#L37

However, task-rpmgrill doesn't make use of this, which means that dist.rpmgrill.setxid just flags every single one, like mine here: https://taskotron.fedoraproject.org/artifacts/all/661354a8-66ab-11e9-99bb-52540077ca13/tests.yml/rpmgrill.json

Would it be possible to ship a Fedora-specific setxid whitelist in the Fedora rpmgrill package, as rpmlint does?  This would allow the task to actually be useful in taskotron, as well as making it clear how to get on the whitelist (file a bug against rpmgrill).  (If you do go this route, please include at least /usr/bin/ksu on the whitelist, else I'll file another ticket. :) )