Skip to content

Commit 2ef429a

Browse files
committed
resolving markdown recommendations
1 parent 3c455bb commit 2ef429a

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

practices/guides/commit-purge.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,13 +2,13 @@
22

33
## Overview
44

5-
There are multiple steps required to ensure sensitive data committed to a GitHub hosted Git repository is fully removed.
5+
There are multiple steps required to ensure sensitive data committed to a GitHub hosted Git repository is fully removed.
66

7-
Engineering teams must take all necessary precautions to ensure that sensitive data does not leak into Source Control Management Systems. This includes secrets being pushed to a remote branch, as well as merging into the default branch. Teams must consider **any** secret posted to a branch of a public repository as compromised and must take necessary steps to revoke and rotate this secret. For Private and Internal repositories teams must still treat leaked credentials as compromised and revoke and rotate them.
7+
Engineering teams must take all necessary precautions to ensure that sensitive data does not leak into Source Control Management Systems. This includes secrets being pushed to a remote branch, as well as merging into the default branch. Teams must consider **any** secret posted to a branch of a public repository as compromised and must take necessary steps to revoke and rotate this secret. For Private and Internal repositories teams must still treat leaked credentials as compromised and revoke and rotate them.
88

9-
Teams must also review their Near Miss reporting requirements and ensure that necessary steps are taken.
9+
Teams must also review their Near Miss reporting requirements and ensure that necessary steps are taken.
1010

11-
Teams must ensure that a [Secret scanner](https://github.com/NHSDigital/software-engineering-quality-framework/tree/main/tools/nhsd-git-secrets) is enabled on their repositories.
11+
Teams must ensure that a [Secret scanner](https://github.com/NHSDigital/software-engineering-quality-framework/tree/main/tools/nhsd-git-secrets) is enabled on their repositories.
1212

1313
Teams must also ensure that developers follow standard processes to ensure any pre-commit hooks are enabled and enforced to reduce the risk of sensitive information being accidentally published. Teams should also contribute to the rule set for these tools to ensure secrets are identified correctly.
1414

0 commit comments

Comments
 (0)