Add sanitizers configuration for Bazel tests and update README

Fixes eclipse-score#101

Author: 4og

.bazelrc

@@ -68,3 +68,12 @@ test:bl-aarch64-qnx --config=_bl_common
 coverage --features=coverage
 coverage --combined_report=lcov
 coverage --cache_test_results=no
+
+# Sanitizer configuration for C++
+test:asan_ubsan_lsan --features=asan
+test:asan_ubsan_lsan --features=ubsan
+test:asan_ubsan_lsan --features=lsan
+test:asan_ubsan_lsan --copt -g3
+test:asan_ubsan_lsan --platform_suffix=asan_ubsan_lsan
+test:asan_ubsan_lsan --test_env=ASAN_OPTIONS="exitcode=55 allow_addr2line=1 verbosity=1 coverage=1 check_initialization_order=1 detect_stack_use_after_return=1 print_stats=1 halt_on_error=1 allocator_may_return_null=1 detect_leaks=1"
+test:asan_ubsan_lsan --test_env=UBSAN_OPTIONS="exitcode=55 allow_addr2line=1 verbosity=1 coverage=1 print_stacktrace=1 halt_on_error=1"

.github/workflows/sanitizers_linux.yml

@@ -0,0 +1,46 @@
+# *******************************************************************************
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
+name: Bazel Sanitizers (Linux)
+permissions:
+  contents: read
+  actions: write
+on:
+  pull_request:
+    types: [opened, reopened, synchronize]
+  push:
+    branches:
+      - main
+  merge_group:
+    types: [checks_requested]
+  workflow_call:
+jobs:
+  linux-sanitizers:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v6
+      - name: Setup Bazel
+        uses: bazel-contrib/setup-bazel@0.18.0
+        with:
+          bazelisk-cache: true
+          disk-cache: ${{ github.job }}
+          repository-cache: true
+          cache-save: ${{ github.event_name == 'push' }}
+      - name: Bazel Test with Sanitizers
+        run: |
+          bazel test --config bl-x86_64-linux --config=asan_ubsan_lsan --build_tests_only -- //score/... \
+          -//score/language/safecpp/aborts_upon_exception:abortsuponexception_toolchain_test \
+          -//score/containers:dynamic_array_test \
+          -//score/containers:non_relocatable_vector_emplace_back_test \
+          -//score/containers:non_relocatable_vector_special_member_funcs_test \
+          -//score/containers:non_relocatable_vector_test

README.md

@@ -96,6 +96,21 @@ bazel build --config=bl-x86_64-qnx -- //score/...
 
 Use the same command as for x86_64 QNX, but replace `--config=bl-x86_64-qnx` with `--config=bl-aarch64-qnx`.
 
+### Sanitizers
+
+To detect memory errors, undefined behavior, and memory leaks, run tests with sanitizers enabled:
+
+```bash
+bazel test --config=bl-x86_64-linux --config=asan_ubsan_lsan --build_tests_only -- //score/...
+```
+
+This configuration enables:
+- **AddressSanitizer (ASan)**: Fast memory error detector.
+- **UndefinedBehaviorSanitizer (UBSan)**: Detects undefined behavior at runtime.
+- **LeakSanitizer (LSan)**: Memory leak detector.
+
+The sanitizers are configured with verbose output and will halt on the first error detected.
+
 ### Generating Documentation
 
 To generate the documentation locally: