# Verify SSH signing works locally
git log --show-signature -1

# Verify the pre-commit hook is active
python -m pre-commit run --all-files
# It reacted to a configuration file in lab 6 that had a private key in plain text.

# Test that gitleaks blocks a fake secret
cat > /tmp/leak-test.txt <<EOF
# This is a deliberate fake secret for Lab 3 testing
GH_PAT=ghp_16C7e42F292c6912E7710c838347Ae178B4a
EOF
cp /tmp/leak-test.txt submissions/leak-attempt.txt
git add submissions/leak-attempt.txt
git commit -m "test: should be blocked by gitleaks"

# To undo the last test.
git restore --staged submissions/leak-attempt.txt
rm submissions/leak-attempt.txt /tmp/leak-test.txt