1*f1c4c3daSCy Schubertname: CIFuzz 2*f1c4c3daSCy Schubert 3*f1c4c3daSCy Schuberton: 4*f1c4c3daSCy Schubert pull_request: {paths: [src/**, .github/workflows/cifuzz.yml]} 5*f1c4c3daSCy Schubert 6*f1c4c3daSCy Schubertpermissions: {} 7*f1c4c3daSCy Schubertjobs: 8*f1c4c3daSCy Schubert Fuzzing: 9*f1c4c3daSCy Schubert runs-on: ubuntu-latest 10*f1c4c3daSCy Schubert permissions: 11*f1c4c3daSCy Schubert security-events: write 12*f1c4c3daSCy Schubert steps: 13*f1c4c3daSCy Schubert - name: Build Fuzzers 14*f1c4c3daSCy Schubert id: build 15*f1c4c3daSCy Schubert uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master 16*f1c4c3daSCy Schubert with: 17*f1c4c3daSCy Schubert oss-fuzz-project-name: 'krb5' 18*f1c4c3daSCy Schubert language: c 19*f1c4c3daSCy Schubert - name: Run Fuzzers 20*f1c4c3daSCy Schubert uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master 21*f1c4c3daSCy Schubert with: 22*f1c4c3daSCy Schubert oss-fuzz-project-name: 'krb5' 23*f1c4c3daSCy Schubert language: c 24*f1c4c3daSCy Schubert fuzz-seconds: 300 25*f1c4c3daSCy Schubert output-sarif: true 26*f1c4c3daSCy Schubert - name: Upload Crash 27*f1c4c3daSCy Schubert uses: actions/upload-artifact@v4 28*f1c4c3daSCy Schubert if: failure() && steps.build.outcome == 'success' 29*f1c4c3daSCy Schubert with: 30*f1c4c3daSCy Schubert name: artifacts 31*f1c4c3daSCy Schubert path: ./out/artifacts 32*f1c4c3daSCy Schubert - name: Upload Sarif 33*f1c4c3daSCy Schubert if: always() && steps.build.outcome == 'success' 34*f1c4c3daSCy Schubert uses: github/codeql-action/upload-sarif@v3 35*f1c4c3daSCy Schubert with: 36*f1c4c3daSCy Schubert # Path to SARIF file relative to the root of the repository 37*f1c4c3daSCy Schubert sarif_file: cifuzz-sarif/results.sarif 38*f1c4c3daSCy Schubert checkout_path: cifuzz-sarif 39