Files
containerd/.github/workflows/fuzz.yml
dependabot[bot] 4fa23707c8 build(deps): bump actions/checkout from 7.0.0 to 7.0.1
Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](9c091bb21b...3d3c42e5aa)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-24 23:24:34 +00:00

55 lines
1.9 KiB
YAML

name: Fuzzing
on: [pull_request]
permissions: # added using https://github.com/step-security/secure-workflows
contents: read
jobs:
# Run all fuzzing tests. Some of them use Go 1.18's testing.F.
# Others use https://github.com/AdaLogics/go-fuzz-headers.
ci_fuzz:
name: CI Fuzz
if: github.repository == 'containerd/containerd'
runs-on: ubuntu-latest
timeout-minutes: 60
steps:
- name: Build Fuzzers
id: build
uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@c8c1b257db4da92299bdf9fd058fff1bb008b2ad # ubuntu-24-04 support
with:
oss-fuzz-project-name: 'containerd'
language: go
- name: Run Fuzzers
uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@c8c1b257db4da92299bdf9fd058fff1bb008b2ad # ubuntu-24-04 support
with:
oss-fuzz-project-name: 'containerd'
fuzz-seconds: 300
language: go
continue-on-error: true
- name: Upload Crash
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
if: failure() && steps.build.outcome == 'success'
with:
name: artifacts
path: ./out/artifacts
# Make sure all fuzzing tests which use Go 1.18's testing.F are
# runnable with go test -fuzz.
go_test_fuzz:
name : go test -fuzz
if: github.repository == 'containerd/containerd'
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- uses: ./.github/actions/install-go
- run: script/go-test-fuzz.sh
- name: Upload Crash
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
if: failure()
with:
name: go-test-fuzz-artifacts
path: "**/testdata/fuzz/**"
if-no-files-found: ignore