cncf / tag-security

🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!
https://cncf.io/projects
Other
1.99k stars 497 forks source link

Add fuzzing handbook #1124

Closed DavidKorczynski closed 8 months ago

DavidKorczynski commented 8 months ago

Fixes: https://github.com/cncf/tag-security/issues/1080

The handbook is in a state with a lot of information and guides on fuzzing, which can be used during fuzzing engagements by the CNCF and for the maintainers of projects. I think there are some areas that can be improved and extended, and this will also be an ongoing effort, and I assume the handbook will also evolve as the fuzzing efforts across CNCF progress.

I put a somewhat placeholder as title page, and am working on something a bit better. I'd like to keep the ability to generate the PDF through scripts as this makes it a lot easier to update.

In addition to the artifact itself, we will also be using this for the a fuzzing session at the upcoming KubeCon https://kccncna2023.sched.com/event/1TxW4

netlify[bot] commented 8 months ago

Deploy Preview for tag-security canceled.

Name Link
Latest commit 4c339f2a1dc26f7d94aca20d94ae175675e145d0
Latest deploy log https://app.netlify.com/sites/tag-security/deploys/6543c04ffde2e80008375a72
caniszczyk commented 8 months ago

LGTM this is a great addition!

anvega commented 8 months ago

@DavidKorczynski Thank you all for your hard work and for sharing your knowledge so generously. It's clear that a tremendous amount of effort and expertise has gone into this contribution. The technical depth, the attention to detail, and the clarity of the writing will undoubtedly make a significant impact on those who seek to learn and master fuzzing techniques.

Congratulations to everyone involved for a job exceptionally well done!

JonZeolla commented 8 months ago

Awesome work, thank you for this David and Adam!