It seems like $key can also be of type boolean; however, parameter $haystack of strpos() does only seem to accept string, maybe add an additional type check?
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the ignore-type annotation
24
if (strpos(/** @scrutinizer ignore-type */ $key, "year") !== false) {