# Building minimal and low CVE images for Java

DevFeed: [Building minimal and low CVE images for Java](<https://devfeed.tech/articles/building-minimal-and-low-cve-images-for-java-12907.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/building-minimal-and-low-cve-images-for-java>)

Published: 2024-06-11T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [Java](<https://devfeed.tech/topics/java.md>), [Security](<https://devfeed.tech/topics/security.md>), [Dockerfile](<https://devfeed.tech/topics/dockerfile.md>), [Maven](<https://devfeed.tech/topics/maven.md>), [grype](<https://devfeed.tech/topics/grype.md>), [Spring Boot](<https://devfeed.tech/topics/spring-boot.md>), [Docker](<https://devfeed.tech/topics/docker.md>), [Docker Hub](<https://devfeed.tech/topics/docker-hub.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [cves](<https://devfeed.tech/tags/cves.md>), [docker](<https://devfeed.tech/tags/docker.md>), [docker-hub](<https://devfeed.tech/tags/docker-hub.md>), [grype](<https://devfeed.tech/tags/grype.md>), [java](<https://devfeed.tech/tags/java.md>), [java-migration](<https://devfeed.tech/tags/java-migration.md>), [security](<https://devfeed.tech/tags/security.md>), [spring-boot](<https://devfeed.tech/tags/spring-boot.md>), [tooling](<https://devfeed.tech/tags/tooling.md>)

## AI overview

This article demonstrates how to build smaller, lower-CVE container images for Java applications with Chainguard Images. It compares a Maven-based Docker image with a Chainguard equivalent, then uses a multi-stage build to remove build tooling and source code from the production image.

## Source excerpt

Build secure, minimal Java images with fewer CVEs. Learn how Chainguard Images helps you optimize security and performance for your Java applications.