fast-mlsirm/.github/workflows/cflite_pr.yml at b42294fef63cc996ea67802c50d07751236778af · ContextualWisdomLab/fast-mlsirm · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
name: ClusterFuzzLite PR fuzzing

on:
  pull_request:
    types: [opened, synchronize, reopened, ready_for_review, converted_to_draft, closed]
    paths:
      - ".clusterfuzzlite/**"
      - ".github/workflows/cflite_pr.yml"
      - "Cargo.toml"
      - "crates/**"
      - "fuzz/**"

permissions:
  contents: read

jobs:
  PR:
    if: ${{ !github.event.pull_request.draft && github.event.action != 'closed' }}
    runs-on: ubuntu-24.04
    permissions:
      contents: read
      security-events: write
    concurrency:
      group: ${{ github.workflow }}-${{ github.repository }}-${{ github.event.pull_request.number }}
      cancel-in-progress: true
    strategy:
      fail-fast: false
      matrix:
        sanitizer: [address]
    steps:
      - name: Prepare ClusterFuzzLite output directory
        run: |
          mkdir -p "$GITHUB_WORKSPACE/build-out"
          chmod -R a+rwx "$GITHUB_WORKSPACE/build-out"
          echo "Prepared ClusterFuzzLite build-out for non-root fuzzbuilder writes"
          ls -ld "$GITHUB_WORKSPACE" "$GITHUB_WORKSPACE/build-out"
      - name: Build fuzzers (${{ matrix.sanitizer }})
        id: build
        uses: google/clusterfuzzlite/actions/build_fuzzers@884713a6c30a92e5e8544c39945cd7cb630abcd1
        with:
          language: rust
          github-token: ${{ secrets.GITHUB_TOKEN }}
          sanitizer: ${{ matrix.sanitizer }}
      - name: Run fuzzers (${{ matrix.sanitizer }})
        id: run
        uses: google/clusterfuzzlite/actions/run_fuzzers@884713a6c30a92e5e8544c39945cd7cb630abcd1
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          fuzz-seconds: 120
          mode: code-change
          output-sarif: true
          sanitizer: ${{ matrix.sanitizer }}