Java developers want container security, just not the job that comes with it

BellSoft’s 2025 State of Container Security survey of 427 Java developers finds security is the top factor in choosing base images, yet many teams still rely on general-purpose Linux and JDK images and report incidents driven largely by human error and patching gaps; respondents commonly use trusted registries and vulnerability scanning, with fewer adopting SBOMs, image signing, or hardware isolation, and organizational time/resource limits hinder improvements—prompting BellSoft to advocate hardened images to offload security and maintenance.