Goal

Practice secure Git fundamentals: signed commits and pre-commit secret scanning.

Changes

• Added labs/submission3.md with comprehensive documentation of secure Git implementations
• Configured SSH commit signing with ED25519 key for commit authenticity verification
• Implemented Git pre-commit hook integrating TruffleHog and Gitleaks Docker containers
• Configured Git global settings for SSH signing format and automatic commit signing

Testing

• Verified signed commits show "Verified" badge on GitHub after pushing
• Tested pre-commit hook by intentionally adding fake secrets to staging area - commit was successfully blocked
• Confirmed successful commits after removing test secrets

Artifacts & Screenshots

Screenshots, terminal outputs, and other evidence demonstrating completion attached in labs/submission3.md.

Pre-submission Checklist

• PR title is clear and descriptive
• Documentation updated in labs/submission3.md
• No secrets, credentials, or large temp files committed
• Task 1 done — SSH commit signing setup
• Task 2 done — Pre-commit secrets scanning setup