spring-boot-deployment
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security risks detected. The skill provides guidance on standard software engineering practices for Spring Boot deployments.\n- [PRIVILEGE_ESCALATION]: The instructions follow the principle of least privilege by advocating for the use of a non-root user (
USER spring:spring) within container images to prevent container breakout vulnerabilities.\n- [CREDENTIALS_UNSAFE]: The skill includes explicit warnings against hardcoding credentials in Docker images, correctly recommending injection via environment variables or Kubernetes Secrets instead.\n- [EXTERNAL_DOWNLOADS]: References official, well-known base images from the Eclipse Temurin project (eclipse-temurin:25-jdk-alpine) for container builds.
Audit Metadata