·
Last changedVersion:
This version passed the hardening gate. Hardening applied 4 targeted changes and preserved all other text. Classified findings before hardening: 3. Classified findings closed: 0. Classified findings remaining: 3. Unclassified scanner findings remaining: 0. Review findings closed: 2. Review findings remaining: 12.
1
2
1
2
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Sensitive Data & Secret Exposure | Data exfiltration | Medium | Open | |
SKILL.md | Malicious Code & Command Execution | — | Low | Open | |
SKILL.md | Supply Chain & Install-Time Trust | Install-time download and execute | Low | Open |
3 findings
Please make sure you have the following software installed on your system:
If you need to custom the project name, please change the artifactId and the packageName in download-spring-boot-project-template
If you need to update the Spring Boot version, please change the bootVersion in download-spring-boot-project-template
archunit-junit5 dependency into build.gradle.kts fileapplication.properties fileapplication.properties fileapplication.properties fileapplication.properties fileCreate docker-compose.yaml at project root and add following services: redis:6, postgresql:17 and mongo:8.
rootroot./redis_data to /datarootroot./postgres_data to /var/lib/postgresql/datarootrootroot./mongo_data to /data/dbInsert redis_data, postgres_data and mongo_data directories in .gitignore file
Run gradle clean test command to check if the project is working
docker-compose up -d to start the services, docker-compose rm -sf to stop the services.Get started with chainctlchainctl skill install public/github/create-spring-boot-kotlin-project:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/github/skills/create-spring-boot-kotlin-project:latest
MIT
HARDENING.md
LICENSE
SKILL.md