This may look like a repeating question, but I posted a sample code suggested by the Compliant sonar rule. If you evaluate below the highlighted code using SonarQube, this violates the squid: S1948 rule.

Result

And yet his mystery is why his violation shows compatible code, plz clarifies.
UPDATE
transient or serializable issue not resolved even with sonar.java.binaries
Sonar scanning succeeds, but generates a class loader warning:
08:26:44.984 INFO - Java bytecode scan... 08:26:44.992 WARN - Class 'dummyserial/Address' is not accessible through the C lassLoader. 08:26:44.993 WARN - Class 'dummyserial/Person' is not accessible through the Cl assLoader. 08:26:44.993 WARN - Class 'dummyserial/Address' is not accessible through the C lassLoader. 08:26:44.994 WARN - Class 'dummyserial/Person' is not accessible through the Cl assLoader. 08:26:44.994 WARN - Class 'dummyserial/Address' is not accessible through the C lassLoader. 08:26:44.997 WARN - Class 'dummyserial/Person' is not accessible through the Cl assLoader. 08:26:44.998 INFO - Java bytecode scan done: 14 ms
source share