diff --git a/src/pages/cli/start/workflows.mdx b/src/pages/cli/start/workflows.mdx
index 0af765a07f6..67c2d28e283 100644
--- a/src/pages/cli/start/workflows.mdx
+++ b/src/pages/cli/start/workflows.mdx
@@ -201,3 +201,7 @@ amplify uninstall
 - `amplify <category> update`
 - `amplify <category> remove`
 - `amplify <category> push`
+
+## Secrets scanning
+
+When working with secrets in your Amplify project it is important to safeguard your secrets from being committed to version control. If you use git, we recommend using [git-secrets](https://github.com/awslabs/git-secrets) from [AWS Labs](https://github.com/awslabs). Once installed, it will scan your local repository for secrets and prevent you from committing them.
\ No newline at end of file