diff --git a/plugins/background_fetch/configs.cc b/plugins/background_fetch/configs.cc
index 27d48f09051..5a6b5099b9f 100644
--- a/plugins/background_fetch/configs.cc
+++ b/plugins/background_fetch/configs.cc
@@ -136,7 +136,7 @@ BgFetchConfig::readConfig(const char *config_file)
         if ("Client-IP"_tv == cfg_name) {
           swoc::IPRange r;
           // '*' is special - match any address. Signalled by empty range.
-          if (cfg_value.size() != 1 || cfg_value.front() == '*') {
+          if (cfg_value.size() != 1 || cfg_value.front() != '*') {
             if (!r.load(cfg_value)) { // assume if it loads, it's not empty.
               TSError("[%s] invalid IP address range %.*s, skipping config value", PLUGIN_NAME, int(cfg_value.size()),
                       cfg_value.data());
diff --git a/plugins/experimental/cache_fill/configs.cc b/plugins/experimental/cache_fill/configs.cc
index b65f0aa7650..26b2e1967ce 100644
--- a/plugins/experimental/cache_fill/configs.cc
+++ b/plugins/experimental/cache_fill/configs.cc
@@ -146,7 +146,7 @@ BgFetchConfig::readConfig(const char *config_file)
         if ("Client-IP"_tv == cfg_name) {
           swoc::IPRange r;
           // '*' is special - match any address. Signalled by empty range.
-          if (cfg_value.size() != 1 || cfg_value.front() == '*') {
+          if (cfg_value.size() != 1 || cfg_value.front() != '*') {
             if (!r.load(cfg_value)) { // assume if it loads, it's not empty.
               TSError("[%s] invalid IP address range %.*s, skipping config value", PLUGIN_NAME, int(cfg_value.size()),
                       cfg_value.data());
diff --git a/plugins/experimental/ja4_fingerprint/test_ja4.cc b/plugins/experimental/ja4_fingerprint/test_ja4.cc
index ffc2f6820cb..c941283ed8b 100644
--- a/plugins/experimental/ja4_fingerprint/test_ja4.cc
+++ b/plugins/experimental/ja4_fingerprint/test_ja4.cc
@@ -37,7 +37,7 @@ static std::string inc(std::string_view sv);
 
 TEST_CASE("JA4")
 {
-  JA4::TLSClientHelloSummary TLS_summary;
+  JA4::TLSClientHelloSummary TLS_summary{};
 
   SECTION("Given the protocol is TCP, "
           "when we create a JA4 fingerprint, "
diff --git a/src/proxy/http/HttpConfig.cc b/src/proxy/http/HttpConfig.cc
index 3b7352b1fc6..d58f7d7c016 100644
--- a/src/proxy/http/HttpConfig.cc
+++ b/src/proxy/http/HttpConfig.cc
@@ -745,7 +745,7 @@ ParsedConfigCache::lookup_impl(TSOverridableConfigKey key, std::string_view valu
 ParsedConfigCache::ParsedValue
 ParsedConfigCache::parse(TSOverridableConfigKey key, std::string_view value)
 {
-  ParsedValue result;
+  ParsedValue result{};
 
   // Store the string value - the parsed structures may reference this.
   result.conf_value_storage = std::string(value);
diff --git a/src/proxy/shared/DiagsConfig.cc b/src/proxy/shared/DiagsConfig.cc
index 9e29be3d6c3..9420f2df1f0 100644
--- a/src/proxy/shared/DiagsConfig.cc
+++ b/src/proxy/shared/DiagsConfig.cc
@@ -42,7 +42,7 @@ void
 DiagsConfig::reconfigure_diags()
 {
   int              i;
-  DiagsConfigState c;
+  DiagsConfigState c{};
   bool             found, all_found;
 
   static struct {