Build binaries in FIPS compliant manner

[grdryn]

JIRA: https://redhat.atlassian.net/browse/RHOAIENG-58628

Description

Fix check-payload failures

Testing

• Unit tests pass (make test)
• Linter passes (make lint)
• New functionality includes tests

PR build shows that check-payload failures are fixed:

➜ podman unshare ~/src/github.com/openshift/check-payload/check-payload scan image --spec quay.io/rhoai/pull-request-pipelines:odh-cli-480b965362a6478f8805d72c2be57a6b424604d5
I0421 01:12:53.110459   67403 main.go:313] using embedded config
I0421 01:12:53.110703   67403 main.go:102] "scan" version="0.3.10-8-g3944a920"
---- Successful run

Review checklist

• Code follows project conventions (see docs/coding/)
• Changes are documented if needed

[grdryn]

/build-konflux

[grdryn]

@ckhordiasma Any idea what's going wrong with the Konflux PR job here? PR #235 seems to show that it's not related to the changes in this PR, and that maybe the job is otherwise broken?

[ckhordiasma]

there seems to be some kind of discrepancy between what the build wants and what hermeto is prefetching.. looking into it some more

[ckhordiasma]

all right, try rebasing with main, should be fixed now

[grdryn]

/build-konflux

[grdryn]

Changes effectively fix the check-payload failures:

➜ podman unshare ~/src/github.com/openshift/check-payload/check-payload scan image --spec quay.io/rhoai/pull-request-pipelines:odh-cli-480b965362a6478f8805d72c2be57a6b424604d5
I0421 01:12:53.110459   67403 main.go:313] using embedded config
I0421 01:12:53.110703   67403 main.go:102] "scan" version="0.3.10-8-g3944a920"
---- Successful run