cobertura files provide a sources tag for dotnet and java and potentially other languages. When possible we should use this when looking for violations