Skip to content

Commit 70a44cb

Browse files
authored
[fuzz] Integrate CIFuzz GitHub Action for continuous security testing (#1028)
* Integrate CIFuzz GitHub Action for continuous security testing * Refine CIFuzz: Add path filtering and manual trigger to reduce CI load * Manual workflow dispatch
1 parent 32a2220 commit 70a44cb

File tree

1 file changed

+35
-0
lines changed

1 file changed

+35
-0
lines changed

.github/workflows/cifuzz.yml

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
name: CIFuzz
2+
on:
3+
workflow_dispatch:
4+
5+
permissions: {}
6+
7+
jobs:
8+
Fuzzing:
9+
runs-on: ubuntu-latest
10+
permissions:
11+
security-events: write
12+
steps:
13+
- name: Build Fuzzers
14+
id: build
15+
uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master
16+
with:
17+
oss-fuzz-project-name: 'apache-poi'
18+
- name: Run Fuzzers
19+
uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master
20+
with:
21+
oss-fuzz-project-name: 'apache-poi'
22+
fuzz-seconds: 600
23+
output-sarif: true
24+
- name: Upload Crash
25+
uses: actions/upload-artifact@v4
26+
if: failure() && steps.build.outcome == 'success'
27+
with:
28+
name: artifacts
29+
path: ./out/artifacts
30+
- name: Upload Sarif
31+
if: always() && steps.build.outcome == 'success'
32+
uses: github/codeql-action/upload-sarif@v2
33+
with:
34+
sarif_file: cifuzz-sarif/results.sarif
35+
checkout_path: cifuzz-sarif

0 commit comments

Comments
 (0)