Revoke private key or add comment indicating the reason it has been committed

[johana-star]

It is a security best practice to never commit a secret, especially within a publicly viewable repository. However, the following file has been committed to your repo:

• supply-chain-office-integration/cert/server.key

To resolve this issue, either revoke this key and remove it from the repo, OR add a comment indicating both why it is necessary to have this private key and why it is not a security risk.