kedacore / keda

KEDA is a Kubernetes-based Event Driven Autoscaling component. It provides event driven scale for any container running in Kubernetes
https://keda.sh
Apache License 2.0
8.56k stars 1.08k forks source link

Add fuzz-testing #6102

Open harshitasao opened 2 months ago

harshitasao commented 2 months ago

Proposal

Fuzz testing or Fuzzing is a Black Box software testing technique, which basically consists in finding implementation bugs using malformed/semi-malformed data injection in an automated fashion.

Integrate the project with OSS-Fuzz by following the instructions here.

Part of #6085

Use-Case

To increase security of the project.

Is this a feature you are interested in implementing yourself?

Yes

Anything else?

Maintainers help is highly appreciated. For example, helping in identifying the components where fuzz testing will be added.

JorTurFer commented 2 weeks ago

Ping @kedacore/keda-core-contributors

zroubalik commented 2 weeks ago

I like this

wozniakjan commented 1 week ago

it can help find subtle bugs not covered by our unit / e2e tests. Sounds good to me.