diff --git a/pom.xml b/pom.xml
index eca6322058..14b99151d7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -77,7 +77,7 @@
     <node.version>v26.0.0</node.version>
     <npm.version>11.8.0</npm.version>
     <spotbugs-maven.version>4.10.3.0</spotbugs-maven.version>
-    <spotbugs.version>4.9.8</spotbugs.version>
+    <spotbugs.version>4.10.3</spotbugs.version>
     <spotless-maven-plugin.version>3.9.0</spotless-maven-plugin.version>
     <spring-boot.version>4.0.3</spring-boot.version>
     <spring-vault.version>4.1.0</spring-vault.version>
diff --git a/src/main/java/org/owasp/wrongsecrets/challenges/docker/Challenge62McpController.java b/src/main/java/org/owasp/wrongsecrets/challenges/docker/Challenge62McpController.java
index 259dc9008d..bbd12dfc5a 100644
--- a/src/main/java/org/owasp/wrongsecrets/challenges/docker/Challenge62McpController.java
+++ b/src/main/java/org/owasp/wrongsecrets/challenges/docker/Challenge62McpController.java
@@ -6,11 +6,7 @@
 import java.io.ByteArrayInputStream;
 import java.nio.charset.StandardCharsets;
 import java.time.Duration;
-import java.util.Base64;
-import java.util.Collections;
-import java.util.LinkedHashMap;
-import java.util.List;
-import java.util.Map;
+import java.util.*;
 import java.util.concurrent.ConcurrentHashMap;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.beans.factory.annotation.Autowired;
@@ -319,7 +315,7 @@ private String getServiceAccountAccessToken() throws Exception {
           (ServiceAccountCredentials)
               credentials.createScoped(Collections.singletonList(DRIVE_SCOPE));
       scopedCredentials.refreshIfExpired();
-      return scopedCredentials.getAccessToken().getTokenValue();
+      return Objects.requireNonNull(scopedCredentials.getAccessToken()).getTokenValue();
     } catch (IllegalArgumentException e) {
       throw new Exception("Invalid base64 encoding for GOOGLE_SERVICE_ACCOUNT_KEY", e);
     }