From f57c232814132dabb80c061f479488a035c44adf Mon Sep 17 00:00:00 2001 From: "Giovani L. Rozza" Date: Thu, 17 Sep 2026 17:15:23 -0300 Subject: [PATCH] Add spring-config-guard to Tools > Testing Static analysis CLI that lints Spring Boot application.yml/properties files for security misconfigurations (Actuator exposure, hardcoded credentials, insecure DB/broker transport, permissive CORS, etc.) before deployment, with a CI-gatable exit code. --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 5467d34..7b7b9eb 100644 --- a/README.md +++ b/README.md @@ -227,6 +227,7 @@ Testing is an essential element of a DevSecOps program because it helps to prepa * [ShiftLeft Scan](https://slscan.io) * [Snyk](https://snyk.io) * [SourceClear](https://www.sourceclear.com) +* [spring-config-guard](https://github.com/rgiovann/spring-config-guard) ## Alerting