ci: skip certification tests that need fixing

Author: panva

certification/runner/index.js

@@ -59,9 +59,19 @@ switch (PLAN_NAME) {
     VARIANT.client_registration = 'dynamic_client';
     break;
   case 'fapi2-message-signing-final-test-plan':
+    if (VARIANT.client_auth_type === 'private_key_jwt') {
+      // TODO: unskip when https://gitlab.com/openid/conformance-suite/-/issues/1498 is fixed
+      SKIP = 'fapi2-security-profile-id2-attempt-reuse-authorization-code-after-one-second';
+    }
     VARIANT.fapi_request_method = 'signed_non_repudiation';
     VARIANT.fapi_response_mode = 'jarm';
     break;
+  case 'fapi2-security-profile-final-test-plan':
+    if (VARIANT.client_auth_type === 'private_key_jwt') {
+      // TODO: unskip when https://gitlab.com/openid/conformance-suite/-/issues/1498 is fixed
+      SKIP = 'fapi2-security-profile-id2-attempt-reuse-authorization-code-after-one-second';
+    }
+    break;
   default:
     break;
 }