Goal

• Task 1 done — SSH commit signing setup
• Task 2 done — Pre-commit secrets scanning setup

Changes

Added

• labs/submission3.md - Complete lab submission with analysis and evidence
• labs/images/02-lab3-commands-executed.png - Git signing configuration screenshot
• labs/images/03-lab3-ssh-keys.png - GitHub SSH keys screenshot
• labs/images/04-lab3-Evidence-Signed-Commits.png - Verified commits evidence
• .git/hooks/pre-commit - Pre-commit secret scanning hook (TruffleHog + Gitleaks)

Modified

• Git global configuration:
  • user.signingkey - SSH key for signing
  • commit.gpgsign=true - Auto-sign all commits
  • gpg.format=ssh - Use SSH format for signing

Testing

1. Signed Commits: All commits show "Verified" badge
2. Secret Detection: Hook successfully blocks commits with secrets
3. Clean Commits: Hook allows legitimate code changes

Checklist

• PR title is clear and descriptive
• Documentation updated if needed
• No secrets or large temporary files included