From a51217c6d91abfa5e1d77d0ae0843e3903adf2d0 Mon Sep 17 00:00:00 2001 From: Loris S <91723853+loris-s-sonarsource@users.noreply.github.com> Date: Mon, 6 Mar 2023 13:17:03 +0100 Subject: [PATCH] Modify rule S6470(Docker): Improve message (#1495) --- rules/S6470/implementation.adoc | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/rules/S6470/implementation.adoc b/rules/S6470/implementation.adoc index a61a312dac..d71315b8aa 100644 --- a/rules/S6470/implementation.adoc +++ b/rules/S6470/implementation.adoc @@ -8,11 +8,13 @@ ifdef::env-github,rspecator-view[] When a dangerous wildcard is found: -* Make sure that using globbing in a (COPY|ADD) source is safe here. +* COPY: Copying using a glob pattern might inadvertently add sensitive data to the container. Make sure it is safe here. +* ADD: Adding files using a glob pattern might inadvertently add sensitive data to the container. Make sure it is safe here. In any other case: -* Make sure that recursively copying directories is safe here. +* COPY: Copying recursively might inadvertently add sensitive data to the container. Make sure it is safe here. +* ADD: Adding files recursively might inadvertently add sensitive data to the container. Make sure it is safe here. == Highlighting