some regular files(e.g. files that have no shebang and no execute bit in source dir) are wrongly assigned execution permission through cmake install, such as scanview.css and ear.c from libscanbuild, which is unnecessary and introduces warnings in some platforms:
install(PROGRAMS ...) is identical to the install(FILES ...) except that the default permissions for the installed file also include OWNER_EXECUTE, GROUP_EXECUTE, and WORLD_EXECUTE. (https://cmake.org/cmake/help/latest/command/install.html#installing-files)