cflite_cron.yml (2809B)
1 name: ClusterFuzzLite cron tasks 2 on: 3 schedule: 4 - cron: '0 0 * * *' # Once a day at midnight. 5 workflow_dispatch: 6 permissions: read-all 7 jobs: 8 Pruning: 9 runs-on: ubuntu-latest 10 steps: 11 - name: Add SSH key 12 env: 13 SSH_AUTH_SOCK: /tmp/ssh_agent.sock 14 run: | 15 mkdir -p /home/runner/.ssh 16 ssh-keyscan github.com >> /home/runner/.ssh/known_hosts 17 # STORAGE_SSH_KEY is the name of the repository secret 18 echo "${{ secrets.STORAGE_SSH_KEY }}" > /home/runner/.ssh/github_actions 19 chmod 600 /home/runner/.ssh/github_actions 20 ssh-agent -a $SSH_AUTH_SOCK > /dev/null 21 ssh-add /home/runner/.ssh/github_actions 22 - name: Build Fuzzers 23 id: build 24 uses: google/clusterfuzzlite/actions/build_fuzzers@v1 25 env: 26 SSH_AUTH_SOCK: /tmp/ssh_agent.sock 27 with: 28 language: c++ 29 storage-repo: https://MTRNord:${{ secrets.PERSONAL_ACCESS_TOKEN }}@github.com/MTRNord/spank_olm_fuzz_storage.git 30 - name: Run Fuzzers 31 id: run 32 uses: google/clusterfuzzlite/actions/run_fuzzers@v1 33 env: 34 SSH_AUTH_SOCK: /tmp/ssh_agent.sock 35 with: 36 github-token: ${{ secrets.GITHUB_TOKEN }} 37 fuzz-seconds: 600 38 mode: 'prune' 39 output-sarif: true 40 storage-repo: https://MTRNord:${{ secrets.PERSONAL_ACCESS_TOKEN }}@github.com/MTRNord/spank_olm_fuzz_storage.git 41 Coverage: 42 runs-on: ubuntu-latest 43 steps: 44 - name: Add SSH key 45 env: 46 SSH_AUTH_SOCK: /tmp/ssh_agent.sock 47 run: | 48 mkdir -p /home/runner/.ssh 49 ssh-keyscan github.com >> /home/runner/.ssh/known_hosts 50 # STORAGE_SSH_KEY is the name of the repository secret 51 echo "${{ secrets.STORAGE_SSH_KEY }}" > /home/runner/.ssh/github_actions 52 chmod 600 /home/runner/.ssh/github_actions 53 ssh-agent -a $SSH_AUTH_SOCK > /dev/null 54 ssh-add /home/runner/.ssh/github_actions 55 - name: Build Fuzzers 56 id: build 57 uses: google/clusterfuzzlite/actions/build_fuzzers@v1 58 env: 59 SSH_AUTH_SOCK: /tmp/ssh_agent.sock 60 with: 61 language: c++ 62 sanitizer: coverage 63 storage-repo: https://MTRNord:${{ secrets.PERSONAL_ACCESS_TOKEN }}@github.com/MTRNord/spank_olm_fuzz_storage.git 64 - name: Run Fuzzers 65 id: run 66 uses: google/clusterfuzzlite/actions/run_fuzzers@v1 67 env: 68 SSH_AUTH_SOCK: /tmp/ssh_agent.sock 69 with: 70 github-token: ${{ secrets.GITHUB_TOKEN }} 71 fuzz-seconds: 600 72 mode: 'coverage' 73 sanitizer: 'coverage' 74 storage-repo: https://MTRNord:${{ secrets.PERSONAL_ACCESS_TOKEN }}@github.com/MTRNord/spank_olm_fuzz_storage.git 75