Skip to content

Build tests against the FIPS 140-3 validated Go crypto module #6193

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ilyakuz-db merged 8 commits into from
Aug 14, 2026
Merged

Build tests against the FIPS 140-3 validated Go crypto module #6193

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
8b08765
Run acceptance tests against a FIPS build in CI
ilyakuz-db Aug 10, 2026
4c33fa2
Correct the FIPS job comment: it does not cover TLS
ilyakuz-db Aug 13, 2026
8928037
Run the existing test matrix against the FIPS module instead of a sep…
ilyakuz-db Aug 13, 2026
78c35f0
Trim comments
ilyakuz-db Aug 13, 2026
9f1ce22
Move GOFIPS140 to Taskfile so every task invocation gets it
ilyakuz-db Aug 13, 2026
63a1c61
Replace the FIPS Go test with an acceptance test
ilyakuz-db Aug 13, 2026
190faac
Commit the FIPS build values to the acceptance golden
ilyakuz-db Aug 14, 2026
3b0ca32
Assert FIPS values explicitly as well as committing them
ilyakuz-db Aug 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions Taskfile.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,9 @@ vars:
EMBED_SOURCES:
sh: 'uv run -p ">=3.11" --no-project python tools/list_embeds.py'

env:
GOFIPS140: v1.0.0

# pydabs-* tasks live in python/Taskfile.yml so `task pydabs-foo` works when
# run from python/. Flattened so they keep their `pydabs-` names at the root.
includes:
Expand Down
2 changes: 2 additions & 0 deletions acceptance/fips/out.test.toml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

5 changes: 5 additions & 0 deletions acceptance/fips/output.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@

>>> go version -m [CLI]
build -tags=fips140v1.0
build DefaultGODEBUG=fips140=on
build GOFIPS140=v1.0.0-c2097c7c
1 change: 1 addition & 0 deletions acceptance/fips/script
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
trace go version -m $CLI | grep -i fips140 | contains.py 'GOFIPS140=v1.0.0' 'DefaultGODEBUG=fips140=on'
2 changes: 2 additions & 0 deletions acceptance/fips/test.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
EnvMatrix.DATABRICKS_BUNDLE_ENGINE = ["direct"]
Cloud = true
Loading