Solved the issue.
Had to exclude the following to avoid hitting https://stackoverflow.com/a/66852438/10319095 from sonar analysis, because it contains a java.lang.ProcessBuilder class for java 1.6 compatibility. Otherwise we would see the following follow-up errors:
Type java.lang.String is indirectly referenced from required .class files but cannot be resolved since the declaring package java.lang exported from module java.base conflicts with a package accessible from module <unnamed>
<groupId>org.gridkit.jvmtool</groupId>
<artifactId>sjk-cli</artifactId>