I've tested TOMCAT 8 running under JZOS on our sandbox system. Works great. Trying it out on our development system and when it starts deployments it scans every file in the entire set of USS filesystems, even when deploying JSPWiki. Obviously something I'm missing but has anyone run across something like this before? My very basic SERVXML:

<?xml version='1.0' encoding='IBM-1047'?>
<!-- This is the Tomcat Config XML document, which is included
as an XML external entity into $CATALINA_BASE/conf/server.xml
The contents of this file are included within a "Server" tag.
The TCCONFIG DD "SERVVARS" member contains XML entities (variables)
that can be used to parameterize this file -->


<!--Used by SAF Realm to register JMX MBeans -->
<Listener className="com.dovetail.zos.tomcat.SafLifecycleListener" />

<!-- Global JNDI resources
Documentation at /docs/jndi-resources-howto.html
-->
<GlobalNamingResources>
<!-- The default Tomcat user database -->
<Resource name="UserDatabase" auth="Container"
type="org.apache.catalina.UserDatabase"
description="User database"
factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
pathname="conf/tomcat-users.xml"
readonly="true" />

</GlobalNamingResources>

<!-- A "Service" is a collection of one or more "Connectors" that share
a single "Container" Note: A "Service" is not itself a "Container",
so you may not define subcomponents such as "Valves" at this level.
Documentation at /docs/config/service.html
-->
<Service name="Catalina">

<!-- A "Connector" represents an endpoint by which requests are received
and responses are returned. Documentation at :
Java HTTP Connector: /docs/config/http.html
Java AJP Connector: /docs/config/ajp.html
APR (HTTP/AJP) Connector: /docs/apr.html
Define a non-SSL/TLS HTTP/1.1 Connector on port 8080
-->
<!-- ****************************************** -->
<!-- * * -->
<!-- * Following is the default port 8088 * -->
<!-- * Connector * -->
<!-- * * -->
<!-- ****************************************** -->
<Connector port="&httpPort;" protocol="HTTP/1.1"
connectionTimeout="20000" />
<!-- ****************************************** -->
<!-- * * -->
<!-- * Following is the Apache Jserv Prototol * -->
<!-- * (AJP) Connector * -->
<!-- * * -->
<!-- ****************************************** -->
<Connector address="127.0.0.1"
port="8009"
protocol="AJP/1.3"
redirectPort="&httpPort;" />

<Engine name="Catalina" defaultHost="&hostname;">

<!-- This Realm uses the UserDatabase configured in the global JNDI
resources under the key "UserDatabase". Any edits
that are performed against this UserDatabase are immediately
available for use by the Realm. -->
<!-- Use the LockOutRealm to prevent attempts to guess user passwords
via a brute-force attack -->
<Realm className="org.apache.catalina.realm.LockOutRealm">
<Realm className="org.apache.catalina.realm.UserDatabaseRealm"
resourceName="UserDatabase"/>
</Realm>

<Host name="&hostname;" appBase="webapps"
unpackWARs="true" autoDeploy="true">

<!-- SingleSignOn valve, share authentication between web applications
Documentation at: /docs/config/valve.html -->
<!--
<Valve className="org.apache.catalina.authenticator.SingleSignOn" />
-->

<!-- Access log processes all example.
Documentation at: /docs/config/valve.html
Note: The pattern used is equivalent to using
pattern="common" -->
<Valve className="org.apache.catalina.valves.AccessLogValve"
directory="logs"
prefix="localhost_access_log" suffix=".txt"
pattern="%h %l %u %t &quot;%r&quot; %s %b" />

</Host>
</Engine>
</Service>

I'm not sure what it might be, possibly something to do with the Tomcat "JarScanner"?
https://tomcat.apache.org/tomcat-8.5-do ... anner.html

In any case, the best place for general (not z/OS specific) Tomcat support is the tomcat-users mailing list:
http://tomcat.apache.org/lists.html#tomcat-users

I would ask your question on this list, and perhaps provide details as to exactly when this is happening and how you see it happening.