Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions .github/pull_request_template.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
## Цель
<!-- Для чего было сделано это изменеие и как оно повлияет на продукт -->

## Изменения
<!-- Что именно было изменено/удалено -->

## Тестирование
<!-- Как проходила проверка того, что изменения работают корректно? -->

## Контрольный список
- [ ] Заголовок четкий и информативный.
- [ ] Документация (README) обновлена (при необходимости).
- [ ] В коде нет секретов (паролей, ключей) и лишних файлов.
- [ ] Task 1 done
- [ ] Task 2 done
36 changes: 36 additions & 0 deletions .github/workflows/lab3-demo.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,36 @@
name: Lab3 GitHub Actions Demo

on:
push:
workflow_dispatch:

jobs:
explore-github-actions:
runs-on: ubuntu-latest

steps:
- run: echo "The job was automatically triggered by a ${{ github.event_name }} event."
- run: echo "This job is now running on a ${{ runner.os }} server hosted by GitHub!"
- run: echo "The name of your branch is ${{ github.ref }} and your repository is ${{ github.repository }}."
- name: Check out repository code
uses: actions/checkout@v4
- run: echo "The ${{ github.repository }} repository has been cloned to the runner."
- name: List files in the repository
run: ls ${{ github.workspace }}

- name: Show system information
run: |
echo "=== uname -a ==="
uname -a
echo "=== lscpu ==="
lscpu
echo "=== free -h ==="
free -h

- name: Print job status
run: echo "This job's status is ${{ job.status }}."





Binary file added labs/image-1.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added labs/image-10.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added labs/image-2.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added labs/image-3.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added labs/image-4.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added labs/image-5.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added labs/image-6.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added labs/image-7.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added labs/image-8.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added labs/image-9.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added labs/image.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
58 changes: 58 additions & 0 deletions labs/submission1.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,58 @@
# Задание 1 Проверка подписи подтверждения SSH-соединения

## 1. Преимущества подписания коммитов
Подписание коммитов обеспечивает **аутентификацию** и **целостность** данных.
* **Подтверждение авторства:** Гарантирует, что код написал именно владелец приватного ключа, а не злоумышленник, подставивший чужой `user.name` в настройки Git.
* **Защита от подмены:** Любое изменение кода после подписания сделает подпись недействительной.

## 2. Почему подписание коммитов важно в DevOps?
В процессах DevOps и CI/CD автоматизация играет ключевую роль. Если pipeline автоматически берет код и отправляет его в продакшн, критически важно быть уверенным в источнике этого кода.
Подпись коммитов защищает от атак, когда хакеры внедряют вредоносный код в надежный репозиторий. Системы безопасности могут быть настроены так, чтобы отвергать любые изменения без валидной подписи.

## 3. Подтверждение
### Скриншот Verified статуса на GitHub
*![alt text](image.png)*


# Task 1 (English version)

## 1. Benefits of Signing Commits
Signing commits ensures both **authentication** and **data integrity**.
* **Proof of Authorship:** It guarantees that the code was written by the owner of the private key, preventing malicious actors from spoofing the `user.name` or email.
* **Tamper Protection:** It ensures that the commit data has not been altered by third parties after it was signed; any modification would invalidate the signature.

## 2. Why is Commit Signing Important in DevOps Workflows?
In DevOps and CI/CD pipelines, automation is key. Since automated systems deploy code to production without manual checks, verifying the source of the code is critical.
Commit signing protects against **Supply Chain Attacks**, where attackers might try to inject malicious code into a trusted repository. Security policies in CI/CD can be configured to automatically reject any changes that lack a valid signature, ensuring only verified code reaches production.

## 3. Just look at the screenshot in russian version

# Задание 2 Шаблон Pull Request

## Скриншот шаблона
*![alt text](image-1.png)*

Шаблон работает / template is workong
![alt text](image-3.png)

## Доказательство наличия файла
![alt text](image-2.png).

## Анализ пользы шаблонов
Использование шаблонов для PR значительно улучшает сотрудничество, так как:
1. **Стандартизация:** Все разработчики оформляют описание одинаково.
2. **Напоминание:** Чек-лист не дает забыть про важные вещи (тесты, документация).
3. **Экономия времени:** Не нужно каждый раз придумывать структуру описания с нуля.

# Task 2 English version

## for paragraph 1 and task 2 loot at screenshots

## 3. Analysis: How PR Templates Improve Collaboration
Using Pull Request templates significantly enhances team collaboration by:
1. **Standardization:** It ensures all developers follow a consistent format for descriptions, making it easier for reviewers to understand the context.
2. **Compliance & Quality:** The checklist serves as a mandatory reminder for critical steps (e.g., running tests, updating documentation), reducing the chance of human error.
3. **Efficiency:** It saves time by providing a ready-to-use structure, eliminating the need to write descriptions from scratch for every change.



Loading