#vulnerable code 
                              public static SonarQubeWebHook get() {
    return Jenkins.getInstance().getExtensionList(RootAction.class).get(SonarQubeWebHook.class);
  } 
                            #location 2 
                            #vulnerability type NULL_DEREFERENCE
#fixed code
                              public static SonarQubeWebHook get() {
    return Jenkins.get().getExtensionList(RootAction.class).get(SonarQubeWebHook.class);
  }