Added security check report field and variable

modules/security/tests/Module/Security/Service/SecurityCheckProcessTest.php

@@ -36,6 +36,23 @@ class SecurityCheckProcessTest extends TestCase
         $this->assertContains('external_systems', $keys);
     }
 
+    public function testReportStepRequiresOfficialCustomerReportField(): void
+    {
+        $process = new SecurityCheckProcess();
+
+        $fields = $process->stepFields(SecurityCheckProcess::STEP_REPORT);
+        $this->assertSame(
+            [SecurityCheckProcess::FIELD_CUSTOMER_REPORT],
+            array_column($fields, 'key')
+        );
+
+        // The owner must fill it before the final step can be completed.
+        $this->assertContains(
+            SecurityCheckProcess::FIELD_CUSTOMER_REPORT,
+            $process->requiredFieldKeys(SecurityCheckProcess::STEP_REPORT)
+        );
+    }
+
     public function testRequiredFieldKeysExcludeOptionalFields(): void
     {
         $keys = (new SecurityCheckProcess())->requiredFieldKeys(SecurityCheckProcess::STEP_INFORMATION);