diff --git a/scripts/base/protocols/conn/main.zeek b/scripts/base/protocols/conn/main.zeek
index 60355d4e2b..015b854df2 100644
--- a/scripts/base/protocols/conn/main.zeek
+++ b/scripts/base/protocols/conn/main.zeek
@@ -240,7 +240,7 @@ function set_conn(c: connection, eoc: bool)
 	{
 	if ( ! c?$conn )
 		{
-		local tmp: Info;
+		local tmp: Info &is_set;
 		c$conn = tmp;
 		}
 
diff --git a/scripts/base/protocols/dns/main.zeek b/scripts/base/protocols/dns/main.zeek
index ff9f47b464..955c3d5eae 100644
--- a/scripts/base/protocols/dns/main.zeek
+++ b/scripts/base/protocols/dns/main.zeek
@@ -293,7 +293,7 @@ hook set_session(c: connection, msg: dns_msg, is_query: bool) &priority=5
 				else
 					{
 					# Just pick an arbitrary, unpaired query.
-					local tid: count;
+					local tid: count &is_set;
 					local found_one = F;
 
 					for ( trans_id, q in c$dns_state$pending_queries )
diff --git a/scripts/base/protocols/ftp/utils-commands.zeek b/scripts/base/protocols/ftp/utils-commands.zeek
index 67c52e62e4..037055a42a 100644
--- a/scripts/base/protocols/ftp/utils-commands.zeek
+++ b/scripts/base/protocols/ftp/utils-commands.zeek
@@ -87,7 +87,7 @@ function add_pending_cmd(pc: PendingCmds, cmd: string, arg: string): CmdArg
 # response code and message.
 function get_pending_cmd(pc: PendingCmds, reply_code: count, reply_msg: string): CmdArg
 	{
-	local best_match: CmdArg;
+	local best_match: CmdArg &is_set;	# &is_set for $ts field
 	local best_seq = 0;
 	local best_score: int = -1;
 
diff --git a/scripts/base/protocols/ntp/main.zeek b/scripts/base/protocols/ntp/main.zeek
index 14bddf90b7..6f870af7f8 100644
--- a/scripts/base/protocols/ntp/main.zeek
+++ b/scripts/base/protocols/ntp/main.zeek
@@ -66,7 +66,7 @@ event zeek_init() &priority=5
 
 event ntp_message(c: connection, is_orig: bool, msg: NTP::Message) &priority=5
 	{
-	local info: Info;
+	local info: Info &is_set;	# &is_set for case where no $std_msg
 	info$ts  = network_time();
 	info$uid = c$uid;
 	info$id  = c$id;
diff --git a/scripts/base/protocols/ssh/main.zeek b/scripts/base/protocols/ssh/main.zeek
index f2dbbac82b..cb38afee13 100644
--- a/scripts/base/protocols/ssh/main.zeek
+++ b/scripts/base/protocols/ssh/main.zeek
@@ -142,7 +142,7 @@ function set_session(c: connection)
 	{
 	if ( ! c?$ssh )
 		{
-		local info: SSH::Info;
+		local info: SSH::Info &is_set;	# needed for $version
 		info$ts  = network_time();
 		info$uid = c$uid;
 		info$id  = c$id;
diff --git a/scripts/base/protocols/ssl/files.zeek b/scripts/base/protocols/ssl/files.zeek
index d0349a0dae..52de1f5da6 100644
--- a/scripts/base/protocols/ssl/files.zeek
+++ b/scripts/base/protocols/ssl/files.zeek
@@ -102,7 +102,7 @@ event file_sniff(f: fa_file, meta: fa_metadata) &priority=5
 	         || f$info$mime_type == "application/pkix-cert" ) )
 		return;
 
-	local c: connection;
+	local c: connection &is_set;	# &is_set to help static analysis
 
 	for ( cid, c in f$conns )
 		{
diff --git a/scripts/policy/protocols/ssl/log-hostcerts-only.zeek b/scripts/policy/protocols/ssl/log-hostcerts-only.zeek
index fc261452af..52fc6b8b22 100644
--- a/scripts/policy/protocols/ssl/log-hostcerts-only.zeek
+++ b/scripts/policy/protocols/ssl/log-hostcerts-only.zeek
@@ -44,7 +44,7 @@ event file_sniff(f: fa_file, meta: fa_metadata) &priority=4
 		 || f$info$mime_type == "application/pkix-cert" ) )
 		return;
 
-	local c: connection;
+	local c: connection &is_set;
 
 	for ( cid, c in f$conns )
 		{
diff --git a/scripts/policy/protocols/ssl/validate-sct.zeek b/scripts/policy/protocols/ssl/validate-sct.zeek
index 98c2f0c647..8a7d38f353 100644
--- a/scripts/policy/protocols/ssl/validate-sct.zeek
+++ b/scripts/policy/protocols/ssl/validate-sct.zeek
@@ -95,7 +95,7 @@ event x509_ocsp_ext_signed_certificate_timestamp(f: fa_file, version: count, log
 	if ( |f$conns| != 1 )
 		return;
 
-	local c: connection;
+	local c: connection &is_set;
 
 	for ( cid, c in f$conns )
 		{