Plan to Scrub Removed Clear-Text Credentials from va.gov-cms Repo

[gracekretschmer-metrostar]

User Story or Problem Statement

As DevOps CMS team member, I want to understand the steps to completely scrub the removed clear-text credentials from all instances of the va.gov-cms repo.

Description or Additional Context

In response to the security flag clear-text credentials from the VA-cms.gov repo, the CMS team removed the rotated out the clear-text credentials from the repo and now wants to create a plan scrub the clear-text credentials from all instances of the va-cms.gov repo.

Related Issues

• https://github.com/department-of-veterans-affairs/va.gov-cms/issues/17774
• https://github.com/department-of-veterans-affairs/va.gov-cms/issues/17838

Acceptance Criteria

• [ ] Scrub the local va-cms.gov repo
• [ ] Force the local va-cms.gov repo up to Github (will need Github support)
• [ ] Document the steps to scrub clear-text credentials from all va-cms.gov repos

[7hunderbird]

I added my notes with screenshots to this page in the Confluence wiki:

• https://vfs.atlassian.net/wiki/spaces/DO/pages/3119775881/Removing+Sensitive+Git+Data

When there's time again to revisit this I'd like to clean it up and present it at the DevOps community of practice, so I put the documentation in that space on Confluence.