springboot-migration — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited springboot-migration (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill for phased upgrade work on existing Spring Boot applications. This skill adds value through the migration scanner, the Boot 4 / Modulith 2 / Testcontainers 2 reference guides, and a strict migration order that avoids mixing too many changes at once.
../creating-springboot-projects/references/java-version-policy.md.Use the migration scanner before planning or editing. It reads pom.xml, build.gradle, or build.gradle.kts (whichever the project has) plus Java sources, properties files, and Flyway migrations:
python3 "${CLAUDE_SKILL_DIR}/scripts/scan_migration_issues.py" /path/to/project${CLAUDE_SKILL_DIR} is this skill's folder. Codex doesn't set it, so there use the folder this SKILL.md is in.
Use the scan output to identify:
StableValue, StructuredTaskScope) that break on a newer JDKLoad only the references that match the codebase:
| Migration | Trigger | Read |
|---|---|---|
| Spring Boot 4.0 | Boot 3.x to 4.x upgrade | references/spring-boot-4-migration.md |
| Spring Modulith 2.0 | Existing Modulith 1.x usage | references/spring-modulith-2-migration.md |
| Testcontainers 2.x | Existing Testcontainers 1.x usage | references/testcontainers-2-migration.md |
| Cross-cutting scenarios and pitfalls | Mixed upgrade planning | references/migration-overview.md |
Use the reference guides to plan and execute in this order.
#### Phase 1: Dependencies
pom.xml or build.gradle#### Phase 2: Source-code changes
#### Phase 3: Configuration
application.properties or application.yml#### Phase 4: Verification
--check; it exits with 1 while any CRITICAL issue remains (a missing modular starter, for example, compiles but fails at startup): python3 "${CLAUDE_SKILL_DIR}/scripts/scan_migration_issues.py" /path/to/project --checkWhen multiple ecosystems are involved, use this order:
Read references/migration-overview.md before deviating from this sequence.
After each phase, report:
references/spring-boot-4-migration.mdreferences/spring-modulith-2-migration.mdreferences/testcontainers-2-migration.mdreferences/migration-overview.mdscripts/scan_migration_issues.py: --check exits with 1 while CRITICAL issues remain. It skips build output and hidden directories, including project-level skill installs.When planning or reporting the migration, return:
## Migration scope
- Current versions:
- Target versions:
## Planned phases
1. ...
2. ...
3. ...
## Files expected to change
- `path/to/file`
## Verification
- Tests or checks to run~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.