feat(lab4): juice-shop SBOM + Grype/Trivy comparison + sign-ready attestation #2

	name: Lab 1 Smoke Test

	on:
	pull_request:
	branches: [ main ]

	# pipeline only reads code
	permissions:
	contents: read

	jobs:
	smoke-test:
	runs-on: ubuntu-latest

	services:
	juice-shop:
	image: bkimminich/juice-shop:v20.0.0
	ports:
	- 3000:3000

	steps:
	- name: Checkout repository
	uses: actions/checkout@v4


	- name: Wait for Juice Shop to be started
	run: \|
	echo "Waiting for Juice Shop to start..."
	for i in $(seq 1 30); do
	curl --silent --fail http://localhost:3000/rest/admin/application-version >/dev/null && echo "Ready!" && exit 0
	sleep 2
	done
	echo "Timeout!"
	exit 1


	- name: Smoke Test (Curl Homepage)
	run: curl -I http://localhost:3000

Provide feedback