From c2fea07827ce36f31f20832dc030a3a52efa20c7 Mon Sep 17 00:00:00 2001 From: josefaidt Date: Mon, 20 Feb 2023 14:59:39 -0800 Subject: [PATCH 1/2] add a note recommending git-secrets for scanning --- src/pages/cli/start/workflows.mdx | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/pages/cli/start/workflows.mdx b/src/pages/cli/start/workflows.mdx index 0af765a07f6..5fed7c1cbf4 100644 --- a/src/pages/cli/start/workflows.mdx +++ b/src/pages/cli/start/workflows.mdx @@ -201,3 +201,7 @@ amplify uninstall - `amplify update` - `amplify remove` - `amplify push` + +## Secrets scanning + +When working with secrets in your Amplify project it is important to safeguard your secrets from being exposed by being committed to GitHub. We recommend using [git-secrets](https://github.com/awslabs/git-secrets) from [AWS Labs](https://github.com/awslabs). Once installed, it will scan your local repository for secrets and prevent you from committing them. \ No newline at end of file From 4b7f3336bfeb289549ba5c60a4e4f3cff68ef7e5 Mon Sep 17 00:00:00 2001 From: josef Date: Mon, 20 Feb 2023 17:54:13 -0600 Subject: [PATCH 2/2] Update src/pages/cli/start/workflows.mdx Co-authored-by: John Hockett --- src/pages/cli/start/workflows.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/pages/cli/start/workflows.mdx b/src/pages/cli/start/workflows.mdx index 5fed7c1cbf4..67c2d28e283 100644 --- a/src/pages/cli/start/workflows.mdx +++ b/src/pages/cli/start/workflows.mdx @@ -204,4 +204,4 @@ amplify uninstall ## Secrets scanning -When working with secrets in your Amplify project it is important to safeguard your secrets from being exposed by being committed to GitHub. We recommend using [git-secrets](https://github.com/awslabs/git-secrets) from [AWS Labs](https://github.com/awslabs). Once installed, it will scan your local repository for secrets and prevent you from committing them. \ No newline at end of file +When working with secrets in your Amplify project it is important to safeguard your secrets from being committed to version control. If you use git, we recommend using [git-secrets](https://github.com/awslabs/git-secrets) from [AWS Labs](https://github.com/awslabs). Once installed, it will scan your local repository for secrets and prevent you from committing them. \ No newline at end of file