SONARJAVA-6187 S4605: improve scanning detection

[asya-vorobeva]

Add support for the type-safe scanBasePackageClasses attribute on @SpringBootApplication, which was previously ignored, causing false positives for beans reachable via class-based package references.

[sonarqubecloud]

Agentic Analysis: Early Results

Agentic Analysis and Context Augmentation are available on your project. Here are some issues that could have been prevented. Follow the links to learn how to put them into action.

11 issue(s) found across 5 file(s):

Rule	File	Line	Message
java:S120	java-checks-test-sources/default/src/main/java/checks/spring/s4605/springBootApplication/fifthApp/SpringBootApp5.java	1	Rename this package name to match the regular expression '^[a-z]+(.[a-z][a-z0-9])$'.
java:S120	java-checks-test-sources/default/src/main/java/checks/spring/s4605/springBootApplication/fifthApp/controller/MyController.java	1	Rename this package name to match the regular expression '^[a-z]+(.[a-z][a-z0-9])$'.
java:S103	java-checks-test-sources/default/src/main/java/checks/spring/s4605/springBootApplication/fifthApp/controller/MyController.java	6	Split this 227 characters long line (which is greater than 180 authorized).
java:S125	java-checks-test-sources/default/src/main/java/checks/spring/s4605/springBootApplication/fifthApp/controller/MyController.java	6	This block of commented-out lines of code should be removed.
java:S139	java-checks-test-sources/default/src/main/java/checks/spring/s4605/springBootApplication/fifthApp/controller/MyController.java	6	Move this trailing comment on the previous empty line.
java:S120	java-checks-test-sources/default/src/main/java/checks/spring/s4605/springBootApplication/fifthApp/extra/ExtraService.java	1	Rename this package name to match the regular expression '^[a-z]+(.[a-z][a-z0-9])$'.
java:S139	java-checks-test-sources/default/src/main/java/checks/spring/s4605/springBootApplication/fifthApp/extra/ExtraService.java	6	Move this trailing comment on the previous empty line.
java:S120	java-checks-test-sources/default/src/main/java/checks/spring/s4605/springBootApplication/fifthApp/service/MyService.java	1	Rename this package name to match the regular expression '^[a-z]+(.[a-z][a-z0-9])$'.
java:S139	java-checks-test-sources/default/src/main/java/checks/spring/s4605/springBootApplication/fifthApp/service/MyService.java	6	Move this trailing comment on the previous empty line.
java:S120	java-checks-test-sources/default/src/main/java/checks/spring/s4605/springBootApplication/fifthApp/service/ServiceMarker.java	1	Rename this package name to match the regular expression '^[a-z]+(.[a-z][a-z0-9])$'.
java:S2094	java-checks-test-sources/default/src/main/java/checks/spring/s4605/springBootApplication/fifthApp/service/ServiceMarker.java	3	Remove this empty class, write its code or make it an "interface".

_{Analyzed by SonarQube Agentic Analysis in 7.2 s}

[hashicorp-vault-sonar-prod]

SONARJAVA-6403

[leonardo-pilastri-sonarsource]

LGTM, just one comment for a test case

✅ All code review findings resolved.

_{Configure merge blocking}

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
90.3% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

[gitar-bot]

Code Review ✅ Approved 1 resolved / 1 findings

Adds support for the scanBasePackageClasses attribute on @SpringBootApplication to improve bean detection accuracy. The previously missing ExtraService.java test file has been added to resolve potential build failures.

✅ 1 resolved

✅ Bug: Missing test file ExtraService.java will cause test failure

📄 java-checks/src/test/java/org/sonar/java/checks/spring/SpringBeansShouldBeAccessibleCheckTest.java:169
The test testSpringBootApplicationWithMixedScanBasePackageAttributes references mainCodeSourcesPath(testFolder + "extra/ExtraService.java") but the file java-checks-test-sources/default/src/main/java/checks/spring/s4605/springBootApplication/fifthApp/extra/ExtraService.java does not exist in the repository. This will cause the test to fail at runtime when it tries to load the file.

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}