diff --git a/rules/S6437/docker/rule.adoc b/rules/S6437/docker/rule.adoc index c3d49dc3563..0e2b1a79f0d 100644 --- a/rules/S6437/docker/rule.adoc +++ b/rules/S6437/docker/rule.adoc @@ -17,6 +17,10 @@ include::../../../shared_content/secrets/impact/financial_loss.adoc[] include::../../../shared_content/secrets/impact/security_downgrade.adoc[] +=== Exceptions + +In multi-stage builds, the rule only scans instructions that are part of the final image. + == How to fix it Best practices recommend using a secret vault for all secrets that must be diff --git a/rules/S6587/docker/rule.adoc b/rules/S6587/docker/rule.adoc index 4744a8adb5a..e3141f41b47 100644 --- a/rules/S6587/docker/rule.adoc +++ b/rules/S6587/docker/rule.adoc @@ -10,7 +10,7 @@ It should be reduced to speed up deployments and reduce storage and bandwidth. === Exceptions -In multi-stage builds, the rule only checks instructions that are part of the final image. +In multi-stage builds, the rule only scans instructions that are part of the final image. == How to fix it