Sprintboot

application.properties

1) Check always is not set for below keys

server.error.include-message=always
server.error.include-stacktrace=always
server.error.include-binding-errors=always

Docker file

✓ Uses JRE instead of JDK
✓ Runs as non-root user
✓ Uses dedicated application user/group
✓ No privileged execution
✓ Supports external JVM tuning via JAVA_OPTS