Detekt security rules for Spring Boot: missing @PreAuthorize, CSRF disabled, permissive CORS, SpEL injection, Thymeleaf SSTI, insecure actuator exposure, hardcoded datasource passwords, weak BCrypt rounds, JWT issues, and 45+ more rules.