Skip to content

Commit 55e7396

Browse files
manunioKludex
manunio
and
Kludex
authored
fuzz: Add cifuzz (#186)
Co-authored-by: Marcelo Trylesinski <marcelotryle@gmail.com>
1 parent d6d1d11 commit 55e7396

1 file changed

Lines changed: 53 additions & 0 deletions

File tree

‎.github/workflows/cifuzz.yml‎

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
name: CIFuzz
2+
3+
on:
4+
push:
5+
branches:
6+
- master
7+
paths:
8+
- ".github/workflows/cifuzz.yml"
9+
- "fuzz/**"
10+
- "multipart/**"
11+
- "pyproject.toml"
12+
- "python_multipart/**"
13+
- "uv.lock"
14+
15+
permissions: {}
16+
17+
jobs:
18+
# https://google.github.io/oss-fuzz/getting-started/continuous-integration/
19+
Fuzzing:
20+
runs-on: ubuntu-latest
21+
22+
permissions:
23+
security-events: write
24+
25+
steps:
26+
- name: Build Fuzzers
27+
id: build
28+
uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@675ddfb89ae1c614f1dfa99d18b91cd6d1d6b88b # master 2026-04-10
29+
with:
30+
oss-fuzz-project-name: "python-multipart"
31+
language: python
32+
33+
- name: Run Fuzzers
34+
uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@675ddfb89ae1c614f1dfa99d18b91cd6d1d6b88b # master 2026-04-10
35+
with:
36+
oss-fuzz-project-name: "python-multipart"
37+
language: python
38+
fuzz-seconds: 600
39+
output-sarif: true
40+
41+
- name: Upload Crash
42+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
43+
if: failure() && steps.build.outcome == 'success'
44+
with:
45+
name: artifacts
46+
path: ./out/artifacts
47+
48+
- name: Upload Sarif
49+
if: always() && steps.build.outcome == 'success'
50+
uses: github/codeql-action/upload-sarif@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
51+
with:
52+
sarif_file: cifuzz-sarif/results.sarif
53+
checkout_path: cifuzz-sarif

0 commit comments

Comments
 (0)