spring-boot-actuator

Fail

Audited by Runlayer on Mar 16, 2026

Risk Level: HIGH
Scan Summary
Max Score
93%
Files
15
Flagged
9
Chunks
26
Flagged Files (9)
spring-boot-actuator/references/observability.mdHIGH
93.1%

Risky tool definition detected

Supply Chain Compromise

spring-boot-actuator/references/auditing.mdMEDIUM
85.1%

Tool passed security scan

Risky tool definition detected

auth.getName() : "anonymous"; } } ``` ## Audit Events Endpoint The `/actuator/auditevents` endpoint exposes audit events: ``` GET /actuator/auditevents GET /actuator/auditevents?principal=user&after=2023-01-01T00:00:00Z&type=USER_CREATED ``` Response format: ```json { "events": [ { "timestamp": "2023-12-01T10:30:00Z", "principal": "admin", "type": "USER_CREATED", "data": { "userId": "123", "username": "newuser", "email": "user@example.com" } } ] } ``` ## Production Configuration ### Secure Audit

spring-boot-actuator/references/http-exchanges.mdMEDIUM
84.6%

Tool passed security scan

Data Exfiltration

Context Poisoning

Supply Chain Compromise

spring-boot-actuator/references/examples.mdMEDIUM
80.4%

Privilege Escalation

Supply Chain Compromise

Data Exfiltration

Resource Abuse

Context Poisoning

spring-boot-actuator/SKILL.mdMEDIUM
79.8%

Risky tool definition detected

spring-boot-actuator/references/metrics.mdMEDIUM
78.8%

Risky tool definition detected

Tool: spring-boot-actuator/references/metrics.md [1/2] Description: # Metrics with Spring Boot Actuator Spring Boot Actuator provides dependency management and auto-configuration for [Micrometer](https://micrometer.io/), an application metrics facade that supports numerous monitoring systems, including: - AppOptics - Atlas - Datadog - Dynatrace - Elastic - Ganglia - Graphite - Humio - InfluxDB - JMX - KairosDB - New Relic - OpenTelemetry Protocol (OTLP) - Prometheus - Simple (in-memory) - Google

High-cardinality tags (like user IDs) can lead to performance issues: ```java // Bad - high cardinality Timer.builder("user.request.time") .tag("user.id", userId) // Could be millions of different values .register(registry); // Good - low cardinality Timer.builder("user.request.time") .tag("user.type", userType) // Limited number of values .register(registry); ``` ### Sampling For high-throughput applications, consider using sampling to reduce overhead: ```java @Bean public MeterFilter samplingF

spring-boot-actuator/references/cloud-foundry.mdLOW
70.4%

Risky tool definition detected

**Metrics**: Export metrics to Cloud Foundry monitoring systems

spring-boot-actuator/references/tracing.mdLOW
69.8%

Tool passed security scan

spring-boot-actuator/references/monitoring.mdLOW
57.7%

Tool passed security scan

Passed Files (6)Click to expand
spring-boot-actuator/references/jmx.mdOK
40.8%

Tool passed security scan

spring-boot-actuator/references/endpoints.mdOK
26.7%

Tool passed security scan

spring-boot-actuator/references/process-monitoring.mdOK
20.0%

Tool passed security scan

spring-boot-actuator/references/loggers.mdOK
10.1%

Tool passed security scan

spring-boot-actuator/references/enabling.mdOK
6.0%

Tool passed security scan

spring-boot-actuator/references/endpoint-reference.mdOK
3.8%

Tool passed security scan

Audit Metadata
Max File Score
93%
Classification
KNOWN_SERVER_ALL_UNKNOWN
Files Scanned
15
Files Flagged
9
Chunks Analyzed
26
Analyzed
Mar 16, 2026, 02:38 PM
Security Audit — runlayer — spring-boot-actuator