Handling “Expanding archive files is security-sensitive” Sonar issue for archives extracted in-memory

Question

I am expanding an archive in Java as following:

try (ZipInputStream is = new ZipInputStream(new URL(url).openConnecti