diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md new file mode 100644 index 000000000..d5a6a311c --- /dev/null +++ b/.github/pull_request_template.md @@ -0,0 +1,17 @@ +## Goal +Set up SSH commit signing and add a PR template for Lab 1. + +## Changes +- Configured SSH commit signing in git. +- Added minimal pull request template at `.github/pull_request_template.md`. +- Created `labs/submission1.md` with answers and screenshots. + +## Testing +- Created a signed commit, checked that it is marked "Verified" on GitHub. +- Opened a new pull request and confirmed that the template appears automatically. + +## Checklist +- [x] Clear, descriptive PR title +- [x] Documentation/README updated if needed +- [x] No secrets or large temporary files committed + diff --git a/.github/workflows/lab3.yml b/.github/workflows/lab3.yml new file mode 100644 index 000000000..268cbcbbb --- /dev/null +++ b/.github/workflows/lab3.yml @@ -0,0 +1,27 @@ +name: Lab 3 CI + +on: + push: + branches: [ feature/lab3 ] + workflow_dispatch: + +jobs: + build: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + + - name: Hello World + run: echo "Hello, GitHub Actions!" + + - name: System Information + run: | + echo "OS Info:" + uname -a + cat /etc/os-release + echo "CPU Info:" + lscpu + echo "Memory Info:" + free -h + echo "Disk Info:" + df -h diff --git a/labs/submission1.md b/labs/submission1.md new file mode 100644 index 000000000..b7feb771d --- /dev/null +++ b/labs/submission1.md @@ -0,0 +1,27 @@ +# Lab 1 — Commit Signing and PR Template + +## Task 1: SSH Commit Signature Verification + +### 1. Benefits of Signing Commits + +Signing commits helps to prove that I made this commit. It protects my code from someone else trying to pretend to be me. Teams and companies can trust who wrote every piece of code. + +--- + +### 2. Evidence of SSH Key Setup and Signed Commit + +My SSH key is added to GitHub as a Signing Key. I also set up git to sign every commit with SSH. + +Here is my git config output: + +``` +commit.gpgSign=true +gpg.format=ssh +user.signingkey=/Users/shiyanovn/.ssh/id_ed25519.pub +``` + +--- + +### 3. Why is Commit Signing Important in DevOps Workflows? + +In DevOps, many people work on the same code. Signed commits help us know exactly who made each change. It stops attackers or mistakes from unknown people, and is required for security in many companies.