add a note recommending git-secrets for scanning (#5139)

* add a note recommending git-secrets for scanning

* Update src/pages/cli/start/workflows.mdx

Co-authored-by: John Hockett <[email protected]>

---------

Co-authored-by: John Hockett <[email protected]>

Author: 2 people

src/pages/cli/start/workflows.mdx

@@ -201,3 +201,7 @@ amplify uninstall
 - `amplify <category> update`
 - `amplify <category> remove`
 - `amplify <category> push`
+
+## Secrets scanning
+
+When working with secrets in your Amplify project it is important to safeguard your secrets from being committed to version control. If you use git, we recommend using [git-secrets](https://github.com/awslabs/git-secrets) from [AWS Labs](https://github.com/awslabs). Once installed, it will scan your local repository for secrets and prevent you from committing them.