What is the secure configuration for allowing Java Wire Debugging for use within a Docker container?

Note: I wasn't sure what category to select for this one (did not see a Java specific category).

Specific to Java Wire Debugging within a container environment, most of the Oracle guidance, as well as documentation on the internet, show the following configuration, which also works in our environment, with 8000 being the port leveraging the Wire Debugging service:

agentlib:jdwp=transport=dt_socket,server=y,address=8000

Our organization's vulnerability scanners flag the above configuration as vulnerable and expects debugging to be disabled or to only allow either debugging access to the localhost or the remote device requiring debugging access. Example: