mirror of
https://github.com/trezor/trezor-firmware.git
synced 2025-05-08 09:58:46 +00:00
ci(vendor): vendor google/clusterfuzzlite/actions/run_fuzzers@v1
[no changelog]
This commit is contained in:
parent
53225569c8
commit
c13b194daa
97
.github/actions/run-fuzzers/action.yml
vendored
Normal file
97
.github/actions/run-fuzzers/action.yml
vendored
Normal file
@ -0,0 +1,97 @@
|
||||
# Vendored from https://github.com/google/clusterfuzzlite/blob/40f9a53e632516d2ec9f738eadd284635529fbad/actions/run_fuzzers/action.yml
|
||||
|
||||
# action.yml
|
||||
name: 'run-fuzzers'
|
||||
description: 'Runs fuzz target binaries.'
|
||||
inputs:
|
||||
language:
|
||||
description: 'Programming language project is written in.'
|
||||
required: false
|
||||
default: 'c++'
|
||||
fuzz-seconds:
|
||||
description: 'The total time allotted for fuzzing in seconds.'
|
||||
required: true
|
||||
default: 600
|
||||
dry-run:
|
||||
description: 'If set, run the action without actually reporting a failure.'
|
||||
default: false
|
||||
sanitizer:
|
||||
description: 'The sanitizer to run the fuzzers with.'
|
||||
default: 'address'
|
||||
mode:
|
||||
description: |
|
||||
The mode to run the fuzzers with ("code-change", "batch", "coverage", or "prune").
|
||||
"code-change" is for fuzzing a pull request or commit.
|
||||
"batch" is for non-interactive fuzzing of an entire project.
|
||||
"coverage" is for coverage generation.
|
||||
"prune" is for corpus pruning.
|
||||
required: false
|
||||
default: 'code-change'
|
||||
github-token:
|
||||
description: |
|
||||
Token for GitHub API.
|
||||
You should use "secrets.GITHUB_TOKEN" in your workflow file, do not
|
||||
hardcode the token.
|
||||
TODO(https://github.com/google/oss-fuzz/pull/5841#discussion_r639393361):
|
||||
Document locking this down.
|
||||
required: true
|
||||
storage-repo:
|
||||
description: |
|
||||
The git repo to use for storing certain artifacts from fuzzing.
|
||||
required: false
|
||||
storage-repo-branch:
|
||||
description: |
|
||||
The branch of the git repo to use for storing certain artifacts from
|
||||
fuzzing.
|
||||
default: main
|
||||
required: false
|
||||
storage-repo-branch-coverage:
|
||||
description: |
|
||||
The branch of the git repo to use for storing coverage reports.
|
||||
default: gh-pages
|
||||
required: false
|
||||
report-unreproducible-crashes:
|
||||
description: 'If True, then unreproducible crashes will be reported.'
|
||||
required: false
|
||||
default: False
|
||||
minimize-crashes:
|
||||
description: 'If True, reportable crashes will be minimized.'
|
||||
required: false
|
||||
default: False
|
||||
parallel-fuzzing:
|
||||
description: "Whether to use all available cores for fuzzing."
|
||||
required: false
|
||||
default: false
|
||||
output-sarif:
|
||||
description: "Whether to output fuzzing results to SARIF."
|
||||
required: false
|
||||
default: false
|
||||
report-timeouts:
|
||||
description: "Whether to report fails due to timeout."
|
||||
required: false
|
||||
default: true
|
||||
report-ooms:
|
||||
description: "Whether to report fails due to OOM."
|
||||
required: false
|
||||
default: true
|
||||
runs:
|
||||
using: 'docker'
|
||||
image: 'docker://gcr.io/oss-fuzz-base/clusterfuzzlite-run-fuzzers:v1'
|
||||
env:
|
||||
FUZZ_SECONDS: ${{ inputs.fuzz-seconds }}
|
||||
MODE: ${{ inputs.mode }}
|
||||
LANGUAGE: ${{ inputs.language }}
|
||||
DRY_RUN: ${{ inputs.dry-run}}
|
||||
SANITIZER: ${{ inputs.sanitizer }}
|
||||
GITHUB_TOKEN: ${{ inputs.github-token }}
|
||||
LOW_DISK_SPACE: 'True'
|
||||
GIT_STORE_REPO: ${{ inputs.storage-repo }}
|
||||
GIT_STORE_BRANCH: ${{ inputs.storage-repo-branch }}
|
||||
GIT_STORE_BRANCH_COVERAGE: ${{ inputs.storage-repo-branch-coverage }}
|
||||
REPORT_UNREPRODUCIBLE_CRASHES: ${{ inputs.report-unreproducible-crashes }}
|
||||
OUTPUT_SARIF: ${{ inputs.output-sarif }}
|
||||
MINIMIZE_CRASHES: ${{ inputs.minimize-crashes }}
|
||||
CFL_PLATFORM: 'github'
|
||||
PARALLEL_FUZZING: ${{ inputs.parallel-fuzzing }}
|
||||
REPORT_TIMEOUTS: ${{ inputs.report-timeouts }}
|
||||
REPORT_OOMS: ${{ inputs.report-ooms}}
|
Loading…
Reference in New Issue
Block a user