SAST cant find sql injection

There is section about injection vulnerability in 6.5.1 pci compliance, i cant find any sql injection in our source code but already found vulnerabilities sql injections by checkmarx. How to solve that? isn’t possible to find sql injection?