feat(lab4): juice-shop SBOM + Grype/Trivy comparison + sign-ready attestation

Author: RII6

.pre-commit-config.yaml

@@ -0,0 +1,13 @@
+default_stages: [commit]
+
+repos:
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.18.2
+    hooks:
+      - id: gitleaks
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v4.6.0
+    hooks:
+      - id: detect-private-key
+      - id: check-added-large-files
+        args: ['--maxkb=5000']