From e0d96ddafb939acd70eaff544bacccf0a6255be4 Mon Sep 17 00:00:00 2001
From: Zach Margolis <zachmargolis@users.noreply.github.com>
Date: Fri, 30 Aug 2024 12:34:51 -0700
Subject: [PATCH] Add note about sharing diffs to appdev (#603)

---
 _articles/devops-scripts.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/_articles/devops-scripts.md b/_articles/devops-scripts.md
index 4ac8f3aa..4eee2ee6 100644
--- a/_articles/devops-scripts.md
+++ b/_articles/devops-scripts.md
@@ -55,6 +55,14 @@ app-s3-secret: Upload changes to S3? (y/n)
 y
 ```
 
+{%- capture production_warning -%}
+**Note**: When editing secrets, especially in **production**,
+it's a best practice to share the diff in the `#login-appdev` channel for visibility.
+Make sure to redact sensitive values!
+{%- endcapture %}
+
+{% include alert.html content=production_warning alert_class="usa-alert--warning" %}
+
 After updating, [recycle the configuration][config-recycle] so that
 this updated config is picked up.