cflite_pr.yml (1868B)
1 name: ClusterFuzzLite PR fuzzing 2 on: 3 pull_request: 4 paths: 5 - '**' 6 permissions: read-all 7 jobs: 8 PR: 9 runs-on: ubuntu-latest 10 concurrency: 11 group: ${{ github.workflow }}-${{ matrix.sanitizer }}-${{ github.ref }} 12 cancel-in-progress: true 13 strategy: 14 fail-fast: false 15 matrix: 16 sanitizer: 17 - address 18 - undefined 19 - memory 20 steps: 21 - name: Add SSH key 22 env: 23 SSH_AUTH_SOCK: /tmp/ssh_agent.sock 24 run: | 25 mkdir -p /home/runner/.ssh 26 ssh-keyscan github.com >> /home/runner/.ssh/known_hosts 27 # STORAGE_SSH_KEY is the name of the repository secret 28 echo "${{ secrets.STORAGE_SSH_KEY }}" > /home/runner/.ssh/github_actions 29 chmod 600 /home/runner/.ssh/github_actions 30 ssh-agent -a $SSH_AUTH_SOCK > /dev/null 31 ssh-add /home/runner/.ssh/github_actions 32 - name: Build Fuzzers (${{ matrix.sanitizer }}) 33 id: build 34 uses: google/clusterfuzzlite/actions/build_fuzzers@v1 35 env: 36 SSH_AUTH_SOCK: /tmp/ssh_agent.sock 37 with: 38 language: c++ 39 github-token: ${{ secrets.GITHUB_TOKEN }} 40 sanitizer: ${{ matrix.sanitizer }} 41 storage-repo: https://MTRNord:${{ secrets.PERSONAL_ACCESS_TOKEN }}@github.com/MTRNord/spank_olm_fuzz_storage.git 42 - name: Run Fuzzers (${{ matrix.sanitizer }}) 43 id: run 44 uses: google/clusterfuzzlite/actions/run_fuzzers@v1 45 env: 46 SSH_AUTH_SOCK: /tmp/ssh_agent.sock 47 with: 48 github-token: ${{ secrets.GITHUB_TOKEN }} 49 fuzz-seconds: 600 50 mode: 'code-change' 51 sanitizer: ${{ matrix.sanitizer }} 52 output-sarif: true 53 storage-repo: https://MTRNord:${{ secrets.PERSONAL_ACCESS_TOKEN }}@github.com/MTRNord/spank_olm_fuzz_storage.git