Codesonar plugin uses JAXB in many locations. Given this module has been extracted from the JDK in JDK11 (starting with 9+), this is likely to make it hard for this plugin to run in an environment that doesn't have this module explicitly allowed.
If possible, the code should not depend on JAXB anymore so it can be easily used in a Jenkins running on Java 11. (Java 11 preview for Jenkins has been announced in last December, and GA is coming, hence also why I am filing this ticket).
If you need any help, please feel free to reach out to us!