Lab9

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,28 @@
+## Goal
+
+Set up the Lab 1 workflow and document the local OWASP Juice Shop deployment.
+
+## Changes
+
+- Added the Lab 1 triage report in `submissions/lab1.md`.
+- Added the repository pull request template.
+- Added a GitHub Actions smoke test for OWASP Juice Shop.
+
+## Testing
+
+Commands and observed output:
+
+```text
+# Paste the commands you ran and their outputs here before submitting the PR.
+```
+
+## Artifacts & Screenshots
+
+- Lab report: `submissions/lab1.md`
+- Draft PR auto-filled template: add screenshot or PR link here.
+
+## Checklist
+
+- [ ] PR title follows `feat(labN): <topic>`.
+- [ ] No secrets or large temp files committed.
+- [ ] `submissions/labN.md` exists.

.github/workflows/lab1-smoke.yml

@@ -0,0 +1,32 @@
+name: Lab 1 Smoke Test
+
+on:
+  pull_request:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  juice-shop-smoke:
+    runs-on: ubuntu-latest
+    services:
+      juice-shop:
+        image: bkimminich/juice-shop:v20.0.0
+        ports:
+          - 3000:3000
+    steps:
+      - name: Wait for Juice Shop
+        run: |
+          set -euo pipefail
+          for attempt in $(seq 1 30); do
+            if curl --silent --fail http://localhost:3000/rest/admin/application-version; then
+              echo
+              echo "Juice Shop is ready after attempt ${attempt}."
+              exit 0
+            fi
+            sleep 2
+          done
+          echo "Juice Shop did not become ready within 60 seconds."
+          exit 1

.pre-commit-config.yaml

@@ -0,0 +1,13 @@
+repos:
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.30.1
+    hooks:
+      - id: gitleaks
+
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v5.0.0
+    hooks:
+      - id: detect-private-key
+        exclude: ^labs/lab6/vulnerable-iac/ansible/configure\.yml$
+      - id: check-added-large-files
+        exclude: ^labs/lab4/(juice-shop\.cdx\.json|juice-shop-attestation\.json)$