Administrative security review
All software must have an administrative security review before it is made publicly available by any method. This review should ensure that no personal, private, or otherwise sensitive material is included in the repository. Certify that sensitive information is not included within this repository, including:
-
Personally identifiable information (PII) -
Absolute file system paths -
Internal server host names or IP addresses -
Usernames/passwords
All further commits should include an administrative security review to ensure that no sensitive information is included in the git commit history.
Edited by Martinez, Anthony James