google / osv.dev

Open source vulnerability DB and triage service.
https://osv.dev
Apache License 2.0
1.55k stars 190 forks source link

Separate out OSS-Fuzz bisection infrastructure. #2043

Open oliverchang opened 8 months ago

oliverchang commented 8 months ago

For legacy reasons, the OSS-Fuzz bisection infrastructure (https://github.com/google/osv.dev/blob/master/docker/worker/oss_fuzz.py) is closely tied to our OSV.dev workers.

This introduces hidden dependencies (e.g. gvisor), and is difficult to test.

We should separate this out into its own infrastructure.

github-actions[bot] commented 4 months ago

This issue has not had any activity for 60 days and will be automatically closed in two weeks