See Naming Conventions.
The standard CESSDA product test suite is made up of:
The tests are performed as part of the build process. If the tests pass, the Docker image is created and pushed to the Docker image registry.
The Static Analysis (SAST) scan runs against the newly built Docker image. The results are shown in the Jenkins job console output (see example below):