Feature/lab4

[ArthurBabkin]

Goal

Add Lab 4 submission: SBOM generation with Syft/Trivy and SCA with Grype/Trivy.

Changes

• Generated SBOMs for Juice Shop using Syft (native JSON, table) and Trivy (JSON, table)
• Ran SCA: Grype on Syft SBOM + Trivy vuln/secret/license scans
• Compared toolchain accuracy (package overlap, CVE overlap)
• Documented findings in labs/submission4.md

Testing

• Task 1 done — SBOM Generation with Syft and Trivy
• Task 2 done — SCA with Grype and Trivy
• Task 3 done — Comprehensive Toolchain Comparison

Artifacts & Screenshots

• labs/lab4/syft/ — Syft SBOM + Grype results
• labs/lab4/trivy/ — Trivy SBOM + vuln/secrets/license scans
• labs/lab4/comparison/ — package and CVE overlap analysis
• labs/lab4/analysis/ — SBOM and vulnerability analysis summaries

---

Checklist

• PR title is clear and describes the changes
• Documentation updated if needed
• No secrets, API keys, or large temp files in commits