1. 3
  1.  

  2. 1

    David A. Wheeler has best page on this subject for anyone wanting to systematically improve SCM security:

    https://www.dwheeler.com/essays/scm-security.html