run ci with fips check

elastic · Feb 27, 2025 · 330a8e9 · 330a8e9
1 parent e8046c7
commit 330a8e9
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -51,6 +51,23 @@ jobs:
       - name: Unit tests
         run: make test
 
+  test-fips:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          # TODO switch to go.mod once we update to 1.24+
+          go-version: 1.24
+          cache: true
+      - env:
+          CGO_ENABLED: "0"
+          GOFIPS140: "latest"
+          GODEBUG: "fips140=only"
+        # TODO remove tags once cockroachdb/swiss works on 1.24+
+        run: make test
+
   check-update-modules:
     runs-on: ubuntu-latest
     timeout-minutes: 30