Thanks for the feedback but in this case, I am not sure this is a false positive.
While the field is marked as final and cannot be reassigned null or another array, the value at permissions[0] can be modified at will after the creation of the enum.
The visibility might be intended for Helper.combine to be able to manipulate the arrays but maybe you could consider using an immutable data structure instead of an array?