Skip to content

Draft: Add support for testing custom CA for FIPS images

Vishwa Bhat requested to merge semgrep-fips-test into master

Why this MR

The same downstream CI job is being used to verify the Custom Certificate support in both FIPS and Non-FIPS-based images since the IMAGE_TAG_SUFFIX CI var defined in the upstream was not correctly utilized in the downstream.

This MR introduces the following changes to address the above issue:

  1. Introduce three new CI job tests(semgrep, secrets, and kics) dedicated to verifying Custom Certificate support in FIPS images
  2. Remove unsupported analyzers from being tested (gosec, eslint and bandit)

Relevant Issue Numbers

Edited by Vishwa Bhat

Merge request reports