Reformat requirements sections

Signed-off-by: Chris Abraham <[email protected]>

publications/supply-chain-security-tools/securing-source-code.md

@@ -6,19 +6,24 @@ Here are the list of requirements for securing the source code, which is a subca
 
 ## 1. Require signed commits
 
-Tool capability: sign commits, verify signed commits
+<div class="h4">Tool capability</div>
 
-### Tools
+- Sign commits
+- Verify signed commits
+
+<div class="h4 mt-4">Tools</div>
 
 - Sigstore (gitsign)
 - gittuf
 - GUAC
 
 ## 2. Enforce full attestation and verification for protected branches
 
-Tool capability: monitor protected branches
+<div class="h4">Tool capability</div>
+
+- Monitor protected branches
 
-### Tools
+<div class="h4 mt-4">Tools</div>
 
 - gittuf