Skip to content

Update DAST API/API Fuzzing templates to select FIPS image when enabled

Michael Eddington requested to merge 354362-api-sec-fips-template into master

What does this MR do and why?

The API Security analyzers (DAST API/API Fuzzing) have a new container image for FIPS. The templates must support image "tags" (-fips) and auto populate it in the rules when CI_GITLAB_FIPS_MODE=true.

  • Related to #354362 (closed)
  • Update templates adding new _VERSION_TAG variable
  • Update templates with a new rule to set _VERSION_TAG when CI_GITLAB_FIPS_MODE=true
  • Add spec tests to verify behavior
  • Add Changelog entry
  • Manually tested

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Michael Eddington

Merge request reports