By default, clang-tidy doesn't report errors in headers, which is probably why coverity picked up SERVER-57428 but our clang-tidy run didn't. We need to run with a -header-filter argument in order to opt in to reports from our headers. Most likely, that will look something like -header-filter='mongo/.*'.