#vulnerable code 
                                @Test
    public void initializer_same_key() {
        App app = new App();
        final AtomicBoolean called = new AtomicBoolean(false);
        assertThat(called.get(), is(false));

        app.initializer("foo", (theApp) -> {
            called.set(true);
        });
        app.initializer("foo", (theApp) -> {
        });
        app.initialize();
        assertThat(called.get(), is(false));
    } 
                            #location 12 
                            #vulnerability type RESOURCE_LEAK
#fixed code
                                @Test
    public void initializer_same_key() {
        App app = new App(AppConfig.builder().signingSecret("secret").build());
        final AtomicBoolean called = new AtomicBoolean(false);
        assertThat(called.get(), is(false));

        app.initializer("foo", (theApp) -> {
            called.set(true);
        });
        app.initializer("foo", (theApp) -> {
        });
        app.initialize();
        assertThat(called.get(), is(false));
    }