diff options
| author | Theo Buehler <tb@openbsd.org> | 2026-04-13 08:22:44 +0200 |
|---|---|---|
| committer | Theo Buehler <tb@openbsd.org> | 2026-04-13 08:22:44 +0200 |
| commit | 1206a57b20264fc69aa23671f2c42c4b03d21ad8 (patch) | |
| tree | 8f03dad162b32bac33282c2269dbecfea302df77 | |
| parent | d7e17c6e0901b6071ddb8541d48e87fc0ec4ee1f (diff) | |
| parent | 230d258bcaaf584c1e0364359a651185b1a1abc8 (diff) | |
| download | portable-1206a57b20264fc69aa23671f2c42c4b03d21ad8.tar.gz portable-1206a57b20264fc69aa23671f2c42c4b03d21ad8.tar.bz2 portable-1206a57b20264fc69aa23671f2c42c4b03d21ad8.zip | |
Land #1246 - improve CI-fuzz workflow
| -rw-r--r-- | .github/workflows/cifuzz.yml | 59 |
1 files changed, 36 insertions, 23 deletions
diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml index eaa0681..91ee288 100644 --- a/.github/workflows/cifuzz.yml +++ b/.github/workflows/cifuzz.yml | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | name: CIFuzz | 1 | name: "CIFuzz" |
| 2 | 2 | ||
| 3 | on: | 3 | on: |
| 4 | workflow_dispatch: | 4 | workflow_dispatch: |
| @@ -8,26 +8,39 @@ concurrency: | |||
| 8 | cancel-in-progress: true | 8 | cancel-in-progress: true |
| 9 | 9 | ||
| 10 | jobs: | 10 | jobs: |
| 11 | Fuzzing: | 11 | fuzz: |
| 12 | runs-on: ubuntu-24.04 | 12 | name: "Fuzz" |
| 13 | runs-on: "ubuntu-24.04" | ||
| 14 | permissions: | ||
| 15 | security-events: write | ||
| 13 | steps: | 16 | steps: |
| 14 | - name: Build Fuzzers | 17 | - name: "Build Fuzzers" |
| 15 | id: build | 18 | id: build |
| 16 | uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master | 19 | uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@1b73904cfccf3addafb6d599b8e0f32e710790cc |
| 17 | with: | 20 | with: |
| 18 | oss-fuzz-project-name: 'libressl' | 21 | oss-fuzz-project-name: 'libressl' |
| 19 | dry-run: false | 22 | dry-run: false |
| 20 | language: c++ | 23 | language: c++ |
| 21 | - name: Run Fuzzers | 24 | |
| 22 | uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master | 25 | - name: "Run Fuzzers" |
| 23 | with: | 26 | uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@1b73904cfccf3addafb6d599b8e0f32e710790cc |
| 24 | oss-fuzz-project-name: 'libressl' | 27 | with: |
| 25 | fuzz-seconds: 300 | 28 | oss-fuzz-project-name: 'libressl' |
| 26 | dry-run: false | 29 | fuzz-seconds: 300 |
| 27 | language: c++ | 30 | dry-run: false |
| 28 | - name: Upload Crash | 31 | language: c++ |
| 29 | uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 | 32 | output-sarif: true |
| 30 | if: failure() && steps.build.outcome == 'success' | 33 | |
| 31 | with: | 34 | - name: "Upload Crash" |
| 32 | name: artifacts | 35 | uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 |
| 33 | path: ./out/artifacts | 36 | if: failure() && steps.build.outcome == 'success' |
| 37 | with: | ||
| 38 | name: "artifacts" | ||
| 39 | path: "./out/artifacts" | ||
| 40 | |||
| 41 | - name: "Upload SARIF" | ||
| 42 | uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 | ||
| 43 | if: always() && steps.build.outcome == 'success' | ||
| 44 | with: | ||
| 45 | sarif_file: "cifuzz-sarif/results.sarif" | ||
| 46 | category: "cifuzz-sarif" | ||