·
Last changedVersion:
No hardening report available.
/** */ vs ///). Do not rewrite existing comments, or mass-document a codebase, unless the user asks; limit changes to the requested scope.maven.compiler.release, toolchain, java -version) before using newer features, and stay within it. Read the level from the build files first; when you run java or javadoc, use the system JDK rather than binaries from paths inside the repository.@since only with the real version in which the API was introduced; @deprecated with a reason and replacement, together with @Deprecated.@author and @version only if the project already uses them.<pre>{@code ... }</pre> (escape @ at line start, balance braces).{@snippet : ... } for inline code, or {@snippet file="Example.java" region="demo"} with files in snippet-files/ (preferred for examples; javadoc does not compile or validate the snippet source, so if the project already compiles snippet files, keep them compiling, and ask the user before adding source sets, changing build configuration, or running tests). Use // @highlight substring="x" and // @replace markup as needed.///, using [Type#member] for links and fenced code blocks. Use them only if the project already does or the user asks, and the build runs a JDK 23+ javadoc.javadoc -Xdoclint:all -d target/javadoc-check <files>. Pass each edited Java source file as an explicit relative or absolute path, and rename or leave out any file name that begins with a dash. Use target/javadoc-check only if it does not already exist, and delete it after the check. Give javadoc the project source path where needed, and report errors that existed before or come from the environment separately from warnings you introduced. Fix every warning/error you introduced (missing @param, bad HTML, unresolved {@link}, unknown tags).mvn -q javadoc:javadoc (or ./gradlew javadoc) only when the user confirms the repository is trusted or asks for a build based check. Tell the user first that a build runs code from the repository, may download plugins and dependencies over the network, and runs with the user's local build settings. Prefer the build tool's offline mode when local caches exist, stop and ask the user if the build would download from unfamiliar repositories, and run it in a sandbox or isolated environment where practical.Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/github/skills/java-docs:latest
MIT
HARDENING.md
LICENSE
SKILL.md