Additional newline to fix bullets

source/standards/storing-source-code/index.html.md.erb

@@ -169,6 +169,7 @@ For repositories containing application code, the repository should:
 - use a [.gitignore](https://git-scm.com/docs/gitignore) file 
 
 For repositories that are particularly sensitive, or considered higher risk systems we should ensure that:
+
 - [commits are signed](https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits) using a gpg key
 - SBOM's are generated and verified
 - artifacts attestations to provide cryptographically signed provenance of software and artifacts built by the repository/pipeline