False Positive for java:S4605: Class is not reachable by @ComponentScan or @SpringBootApplication

SonarQube Server / Community Build
1

In VS Code with SonarLint we get (we don’t see these issues in SonarQube)

‘JitsiJwtService’ is not reachable by @ComponentScanComp@SpringBootApplicationnentScan or @SpringBootApplication. Either m@ComponentScanve it to a package configured in @ComponentScan or update your @ComponentScan configuration.sonarqube(java:S4605)

for

package se.lfv.sysdev.jwtbridge;

@EnableConfigurationProperties(value = { AppProperties.class })
@SpringBootApplication
public class SpringBootApp {

package se.lfv.sysdev.jwtbridge.internal.api.jitsi;

@Service
@Log4j2
@AllArgsConstructor
public class JitsiJwtService {
3

Hi,

What version of SonarQube for VSCode are you seeing this in?

And does this seem relevant?

SONARJAVA-4601 - FP for rule S4605 when semantic is not complete

 
Thx,
Ann

4 
Identifier: `sonarsource.sonarlint-vscode`
Version: `4.31.0`
Last Updated: 2025-09-17, 09:17:10

Yes, it seems relevant (we using self-hosted though).

5

Hi,

Thanks for that confirmation. The Jira issue mentions * ahem * SonarQube Cloud :joy: partly as a shorthand way of saying “in the latest version of the underlying analyzer.”

Since this ticket is still open, all we can do at this point is wait, I think. Altho I will let the dev team know there’s another vote for it.

 
Thx,
Ann