diff --git a/labs/lab3/image copy.png b/labs/lab3/image copy.png new file mode 100644 index 00000000..08442828 Binary files /dev/null and b/labs/lab3/image copy.png differ diff --git a/labs/lab3/image.png b/labs/lab3/image.png new file mode 100644 index 00000000..3988dc9d Binary files /dev/null and b/labs/lab3/image.png differ diff --git a/labs/submission3.md b/labs/submission3.md new file mode 100644 index 00000000..20855288 --- /dev/null +++ b/labs/submission3.md @@ -0,0 +1,22 @@ +# Benefits of signing commits + +Signing commits using SSH or GPG provides: + +- Author authentication - confirms that the commit was made by the real owner of the key. +- Data integrity - ensures that the commit has not been modified after creation. +- Anti-forgery protection - eliminates the possibility of falsifying the project history. +- Verified label on GitHub - increases trust in the code and its origin. + +GitHub keeps the signature verification forever, even if the key is later revoked or expires. SSH signature is easier to set up and can use an existing key. + + + + + + +Verified commit: +![](lab3/image%20copy.png) + +Discovering secrets: + +![](lab3/image.png) \ No newline at end of file