[aurelien-coet-sonarsource]

---

Summary by Gitar

• Final fields:
  • Made sourceDirs in SpotBugsXmlReportReader and matchers in MethodMatchersList final
  • Marked many check, visitor, and frontend fields as final
• Array initializers:
  • Replaced new int[] {...} with {...} shorthand in CFGTest and FileLinesVisitorTest
  • Simplified array creation in JavaSensorTest and ContentHashCacheTest

_{This will update automatically on new commits.}

[hashicorp-vault-sonar-prod]

SONARJAVA-7220

[gitar-bot]

Code Review ✅ Approved

🟢 Low risk · The changes only make existing fields final and simplify test array initializers, leaving runtime behavior and public interfaces unchanged.

Style cleanup marking fields as final in SpotBugsXmlReportReader, MethodMatchersList, and several check and visitor classes, plus simplifying array initializers in CFGTest, FileLinesVisitorTest, JavaSensorTest, and ContentHashCacheTest. No issues found.

Verification Rules 1/2 met

Rules 1 failed 1 passed 1 not applicable

❌ Repository license compliance - LICENSE.txt contains SSALv1 terms, but the central exception for sonar-java requires LGPL-3.0 and no LGPL text is present; confirm the intended license with owners (this PR does not change it).
✅ Internal artifact registries

Functional validation No results

Auto-approval Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
111 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

[BartLucien]

LGTM!