Feature/lab3

[Wilikson173]

Goal

Implement SSH commit signing with GitHub verification and add automated secret detection using pre-commit and gitleaks.

Changes

• Added .pre-commit-config.yaml

  • Configured gitleaks (v8.26.0)
  • Added detect-private-key
  • Added check-added-large-files

• Added submissions/lab3.md

  • SSH signing setup and verification
  • GitHub Verified commit evidence
  • STRIDE repudiation reflection
  • gitleaks blocking demonstration
  • Bonus: git filter-repo history rewrite exercise

Testing

git log --show-signature -1

pre-commit install

pre-commit run --all-files

git commit -m "test: should be blocked by gitleaks"

Observed results:

Good "git" signature

pre-commit installed at .git/hooks/pre-commit

Detect hardcoded secrets.........................................Failed
RuleID: github-pat

The fake GitHub Personal Access Token was successfully detected and the commit was blocked by gitleaks.

Artifacts & Screenshots

• submissions/lab3.md

Verified Commit

Paste the screenshot showing the green Verified badge below:

---

Checklist

• Title follows feat(lab3): <topic> style
• No secrets or large temp files committed
• Submission file exists at submissions/lab3.md