Feature/lab2

[Vlad1mirZhidkov]

Goal

Complete Lab 2 deliverables for Threagile threat modeling of OWASP Juice Shop, including baseline analysis and secure-variant comparison.

Changes

• Added labs/submission2.md with Task 1/Task 2 analysis, Top 5 risks, scoring method, and delta explanation.
• Added generated baseline artifacts in labs/lab2/baseline/ (report.pdf, diagrams, risks.json, stats.json, technical-assets.json).
• Added secure model and generated secure artifacts in labs/lab2/threagile-model.secure.yaml and labs/lab2/secure/ (report.pdf, diagrams, risks.json, stats.json, technical-assets.json).
• Documented risk category comparison (Baseline vs Secure) with observed reductions (unencrypted-communication, unencrypted-asset).

Testing

• Not run (explain why)
• Manual (describe): Verified required files exist, tables in labs/submission2.md match generated JSON counts, and diagrams render.
• Automated (name): Threagile Docker generation for baseline/secure + JSON/JQ-based risk delta comparison.

Artifacts & Screenshots

• labs/submission2.md
• labs/lab2/threagile-model.yaml
• labs/lab2/threagile-model.secure.yaml
• labs/lab2/baseline/report.pdf
• labs/lab2/baseline/data-flow-diagram.png
• labs/lab2/baseline/data-asset-diagram.png
• labs/lab2/secure/report.pdf
• labs/lab2/secure/data-flow-diagram.png
• labs/lab2/secure/data-asset-diagram.png

Checklist

• Clear, scoped title
• Docs updated if needed
• No secrets or large temp files