security_test_chromeos_image: Add support for ensure_amd_psp_flags

This commits adds support for the `ensure_amd_psp_flags` script which
only needs to be few on certain AMD boards.

BRANCH=none
BUG=b:202397678
TEST=Verified that ensure_amd_psp_flags executes correctly

Change-Id: I6ae61083113497d1c63b5ed5a0bd608c525a0c6e
Signed-off-by: Robert Zieba <robertzieba@google.com>
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/3821000
Reviewed-by: Mike Frysinger <vapier@chromium.org>

1 files changed, 13 insertions, 1 deletions

diff --git a/scripts/image_signing/security_test_artifact.py b/scripts/image_signing/security_test_artifact.py
index 78ffd09d..88357556 100755
--- a/scripts/image_signing/security_test_artifact.py
+++ b/scripts/image_signing/security_test_artifact.py
@@ -13,7 +13,6 @@ import sys
 
 DIR = Path(__file__).resolve().parent
 
-
 def exec_test(name, input, args):
     """Runs a given script
 
@@ -35,6 +34,14 @@ def get_parser():
     """Creates an argument parser"""
     parser = argparse.ArgumentParser(description=__doc__)
     parser.add_argument(
+        "--board",
+        "-b",
+        default="",
+        help="Board name",
+        type=str,
+    )
+
+    parser.add_argument(
         "--config",
         "-c",
         help="Security test baseline config directory",
@@ -94,6 +101,11 @@ def main(argv):
     for test in tests:
         exec_test(test, opts.input, [])
 
+    # Run custom tests.
+    if opts.keyset_is_mp:
+        # AMD PSP flags only need to be checked for MP-signed artifacts.
+        exec_test("ensure_amd_psp_flags", opts.input, [opts.board])
+
 
 if __name__ == "__main__":
     sys.exit(main(sys.argv[1:]))