mirror of https://github.com/sudo-project/sudo.git
52 lines
1.3 KiB
YAML
52 lines
1.3 KiB
YAML
# See: https://google.github.io/oss-fuzz/getting-started/continuous-integration/
|
|
|
|
name: CIFuzz
|
|
on:
|
|
# Trigger the workflow on push or pull requests, but only for the
|
|
# main branch and only for C source files.
|
|
push:
|
|
branches:
|
|
- main
|
|
paths:
|
|
- '**.c'
|
|
- '**.h'
|
|
pull_request:
|
|
branches:
|
|
- main
|
|
paths:
|
|
- '**.c'
|
|
- '**.h'
|
|
permissions: {}
|
|
jobs:
|
|
Fuzzing:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
security-events: write
|
|
steps:
|
|
- name: Build Fuzzers
|
|
id: build
|
|
uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master
|
|
with:
|
|
oss-fuzz-project-name: 'sudoers'
|
|
language: c
|
|
- name: Run Fuzzers
|
|
uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master
|
|
with:
|
|
oss-fuzz-project-name: 'sudoers'
|
|
language: c
|
|
fuzz-seconds: 600
|
|
output-sarif: true
|
|
- name: Upload Crash
|
|
uses: actions/upload-artifact@v3
|
|
if: failure() && steps.build.outcome == 'success'
|
|
with:
|
|
name: artifacts
|
|
path: ./out/artifacts
|
|
- name: Upload Sarif
|
|
if: always() && steps.build.outcome == 'success'
|
|
uses: github/codeql-action/upload-sarif@v2
|
|
with:
|
|
# Path to SARIF file relative to the root of the repository
|
|
sarif_file: cifuzz-sarif/results.sarif
|
|
checkout_path: cifuzz-sarif
|