Update rule S6437: add multi-stage build exceptions (#4566)

SonarSource · Dec 10, 2024 · fb328a5 · fb328a5
1 parent 0cc91b7
commit fb328a5
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/rules/S6437/docker/rule.adoc b/rules/S6437/docker/rule.adoc
@@ -17,6 +17,10 @@ include::../../../shared_content/secrets/impact/financial_loss.adoc[]
 
 include::../../../shared_content/secrets/impact/security_downgrade.adoc[]
 
+=== Exceptions
+
+In multi-stage builds, the rule only scans instructions that are part of the final image.
+
 == How to fix it
 
 Best practices recommend using a secret vault for all secrets that must be

diff --git a/rules/S6587/docker/rule.adoc b/rules/S6587/docker/rule.adoc
@@ -10,7 +10,7 @@ It should be reduced to speed up deployments and reduce storage and bandwidth.
 
 === Exceptions
 
-In multi-stage builds, the rule only checks instructions that are part of the final image.
+In multi-stage builds, the rule only scans instructions that are part of the final image.
 
 == How to fix it