spring-boot-docker
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides patterns for fetching build utilities from the official Spring Projects GitHub repository to support jlink runtime construction.
- [COMMAND_EXECUTION]: The instructions involve standard development and verification commands, including Maven wrapper usage for compilation and Docker commands for testing signal handling and memory limits.
- [DYNAMIC_EXECUTION]: The skill facilitates the standard build process of compiling Java source code into executable JAR files within a multi-stage Docker environment.
- [SAFE]: The content promotes several high-priority security best practices, such as requiring non-root user execution with fixed UIDs, pinning base images by digest to ensure reproducibility and supply chain integrity, and strict build context filtering to exclude sensitive files like .env from the image.
Audit Metadata