Disable explicit Spring AI tool-content tracing (OWASP LLM02)

Proprietary

Disable direct true values of spring.ai.tools.observations.include-content in recognized Spring properties and YAML configuration. This prevents the auto-configured tool-content observation filter from exporting tool arguments and results as span attributes. Timing and operational observation settings are preserved. Does not remove custom observation filters or tracing code. Placeholders, missing settings, Java property annotations, and shared/tagged/block YAML values are preserved.

org.openrewrite.ai.security.DisableSpringAiToolContentTracing

mod run . --recipe=org.openrewrite.ai.security.DisableSpringAiToolContentTracing

Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.