https://gitlab.com/gitlab-org/gitlab/-/issues/212700 shows that https://gitlab.com/gitlab-org/security-products/tests/custom-ca is not a good way to test custom CA certificates support as it was passing for gosec even when it didn't work. ### Proposal For all analyzers that need the ability for custom CA certificates to be added to the container certificate chains: * Create a test that shows the analyzer failing to run when a custom cert isn't added. * Create a test that shows the analyzer passing once the custom cert is added. These tests will likely need to create a full scenario with a private dependency or the like where the analyzer under test will need the custom certificate in order to build the test project.