diff --git a/supply-chain/config.toml b/supply-chain/config.toml
index ad39ffb1..1e9553a0 100644
--- a/supply-chain/config.toml
+++ b/supply-chain/config.toml
@@ -124,6 +124,8 @@ criteria = "safe-to-deploy"
 [[exemptions.errno]]
 version = "0.3.11"
 criteria = "safe-to-run"
+suggest = false
+notes = "At time of review this was only built if targeting WASI, which is not an intended target."
 
 [[exemptions.esplugin]]
 version = "6.1.3"
@@ -164,6 +166,8 @@ criteria = "safe-to-deploy"
 [[exemptions.libredox]]
 version = "0.1.3"
 criteria = "safe-to-deploy"
+suggest = false
+notes = "At time of review this was only built if targeting Redox, which is not an intended target."
 
 [[exemptions.link-cplusplus]]
 version = "1.0.10"
@@ -172,6 +176,8 @@ criteria = "safe-to-deploy"
 [[exemptions.linux-raw-sys]]
 version = "0.9.3"
 criteria = "safe-to-run"
+suggest = false
+notes = "At time of review this was only built if targeting WASI, which is not an intended target."
 
 [[exemptions.log]]
 version = "0.4.28"
@@ -284,10 +290,14 @@ criteria = "safe-to-deploy"
 [[exemptions.r-efi]]
 version = "5.2.0"
 criteria = "safe-to-run"
+suggest = false
+notes = "At time of review this was only built if targeting UEFI, which is not an intended target."
 
 [[exemptions.redox_users]]
 version = "0.5.0"
 criteria = "safe-to-deploy"
+suggest = false
+notes = "At time of review this was only built if targeting Redox, which is not an intended target."
 
 [[exemptions.regex]]
 version = "1.11.1"
@@ -308,6 +318,8 @@ criteria = "safe-to-deploy"
 [[exemptions.rustix]]
 version = "1.0.5"
 criteria = "safe-to-run"
+suggest = false
+notes = "At time of review this was only built if targeting WASI, which is not an intended target."
 
 [[exemptions.saphyr]]
 version = "0.0.6"
@@ -364,10 +376,14 @@ criteria = "safe-to-deploy"
 [[exemptions.wasi]]
 version = "0.11.0+wasi-snapshot-preview1"
 criteria = "safe-to-deploy"
+suggest = false
+notes = "At time of review this was only built if targeting WASI, which is not an intended target."
 
 [[exemptions.wasi]]
 version = "0.14.2+wasi-0.2.4"
 criteria = "safe-to-run"
+suggest = false
+notes = "At time of review this was only built if targeting WASI, which is not an intended target."
 
 [[exemptions.winapi]]
 version = "0.3.9"