Incorrect ( Misleading) title - "Scrub sensitive data from a repo"

Question

This is not a question - am just reporting that the title to the training is incorrect ( or misleading and not proper)

Am referring to this page => https://learn.microsoft.com/en-us/training/modules/manage-sensitive-data-security-policies/3-scrub-sensitive-data-from-repository

which is the 3rd part of this tutorial

https://learn.microsoft.com/en-us/training/modules/manage-sensitive-data-security-policies/

It does not talk at all about 'scrubbing' sensitive data from a repo ?

I was expecting it to talk about ways to use BFG etc to remove secrets from commit history ; however it only talks about rulesets etc.

Thus I think the title needs to be updated to something else.

Thanks

Taher.

Answer 1

Hi Taher Furniturewala,

Thank you for your engagement on the Microsoft Q&A forum.

We appreciate your feedback regarding Unit 3 of the "Manage sensitive data and security policies within GitHub" module.

We understand your concern about the discrepancy between the title and the content of Unit 3. Indeed, the current unit focuses primarily on rulesets and policies for managing sensitive data within GitHub repositories, rather than specific tools for scrubbing data from commit history.

The content structure of Unit 3 is designed to provide foundational knowledge on creating and managing rulesets to prevent accidental exposure of sensitive data within GitHub repositories. It emphasizes the establishment of policies and configurations to enforce data security practices effectively.

Unit 7 of the module, particularly under the "Resource Links" section, addresses the specific topic of removing sensitive data from a repository and introduces tools such as BFG Repo-Cleaner. Furthermore, Unit 5 includes an exercise that assess our comprehension of removing commits from Git history, thereby complementing this topic.

Regarding the title "Scrub sensitive data from a repository" for Unit 3, we acknowledge the discrepancy you have highlighted. However, the title is intended to guide learners in understanding the broader scope of implementing security policies within GitHub, rather than focusing exclusively on tools for data scrubbing.

Please do not hesitate to reach out if you have further questions. We are here to help.

If you find this information helpful, please consider indicating your acknowledgment by clicking the "Upvote" and "Accept Answer" buttons on the post.