Hi @MVoss,
like in Std::ostringstream object is wongly identified as a signed operand: L832 - Bitwise operators should not be applied to signed operands could you please run the scanner with -Dsonar.verbose=true property and share the logs?
I believe that what happens is a misconfiguration leading to not finding some header files leading to some parsing errors -> error recovery -> false-positives.