mirror of
https://github.com/WeblateOrg/weblate.git
synced 2026-07-27 22:09:03 +08:00
74 lines
2.3 KiB
YAML
Vendored
74 lines
2.3 KiB
YAML
Vendored
# Copyright © Weblate contributors
|
|
#
|
|
# SPDX-License-Identifier: GPL-3.0-or-later
|
|
|
|
name: ClusterFuzzLite Batch Fuzzing
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
schedule:
|
|
- cron: 0 2 * * *
|
|
|
|
permissions:
|
|
actions: read
|
|
contents: read
|
|
|
|
jobs:
|
|
batch-fuzzing:
|
|
permissions:
|
|
actions: read
|
|
contents: read
|
|
runs-on: ubuntu-24.04
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
sanitizer:
|
|
- address
|
|
steps:
|
|
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
with:
|
|
persist-credentials: false
|
|
- name: Build Fuzzers (${{ matrix.sanitizer }})
|
|
id: build
|
|
uses: google/clusterfuzzlite/actions/build_fuzzers@884713a6c30a92e5e8544c39945cd7cb630abcd1 # v1
|
|
with:
|
|
language: python
|
|
sanitizer: ${{ matrix.sanitizer }}
|
|
- name: Run Fuzzers (${{ matrix.sanitizer }})
|
|
id: run
|
|
env:
|
|
CFLITE_MODE: batch
|
|
SENTRY_DSN: ${{ secrets.SENTRY_FUZZING_DSN }}
|
|
SENTRY_ENVIRONMENT: fuzzing-batch
|
|
uses: ./.github/actions/cflite-run-fuzzers
|
|
with:
|
|
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
fuzz-seconds: 1800
|
|
mode: batch
|
|
sanitizer: ${{ matrix.sanitizer }}
|
|
parallel-fuzzing: true
|
|
output-sarif: true
|
|
- name: Show fuzz findings (${{ matrix.sanitizer }})
|
|
if: always() && steps.build.outcome == 'success'
|
|
run: >-
|
|
python3 -m fuzzing.findings_reporter
|
|
--mode batch
|
|
--sanitizer "${{ matrix.sanitizer }}"
|
|
--print-report
|
|
--github-step-summary
|
|
--no-sentry
|
|
- name: Report fuzz findings to Sentry (${{ matrix.sanitizer }})
|
|
if: always() && steps.build.outcome == 'success'
|
|
env:
|
|
CFLITE_MODE: batch
|
|
SANITIZER: ${{ matrix.sanitizer }}
|
|
SENTRY_DSN: ${{ secrets.SENTRY_FUZZING_DSN }}
|
|
SENTRY_ENVIRONMENT: fuzzing-batch
|
|
run: python3 -m fuzzing.findings_reporter --mode batch --sanitizer "${{ matrix.sanitizer }}"
|
|
- name: Upload crash summaries artifact (${{ matrix.sanitizer }})
|
|
if: always() && steps.build.outcome == 'success'
|
|
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
|
with:
|
|
name: cflite-batch-crash-summaries-${{ matrix.sanitizer }}
|
|
path: out/artifacts/**/*.summary
|
|
if-no-files-found: ignore
|
