Integration with oss-fuzz fuzzing service

manunio commented 1 year ago

Hi @m4b, I would like to help integrate this project into OSS-Fuzz.

As an initial step for integration I have created this PR: https://github.com/google/oss-fuzz/pull/8646, it contains necessary logic from an OSS-Fuzz perspective to integrate goblin.
OSS-Fuzz is a free service run by Google that performs continuous fuzzing of important open source projects.
As goblin already have cargo-fuzz based fuzzing implemented, this makes it easily compatible with oss-fuzz out of box.
If you would like to integrate, the only thing I need is a list of email(s), it must be associated with a google account like gmail (why?). by doing that, the provided email(s) will get access to the data produced by OSS-Fuzz, such as bug reports, coverage reports and more stats.

~~- As an alternative, if you don't have a google/gmail id, but still wish to integrate. I can add my mail id for time being and monitor bug/crashes.~~

Notice the email(s) affiliated with the project will be public in the OSS-Fuzz repo, as they will be part of a configuration file.

m4b commented 1 year ago

hi @manunio i would prefer not to sign up my email for this service, but if you feel like it and don't mind it, I don't see a problem with you signing up and either opening issues you find here or perhaps sending me an email if something serious is discovered :)

manunio commented 1 year ago

hi @manunio i would prefer not to sign up my email for this service, but if you feel like it and don't mind it, I don't see a problem with you signing up and either opening issues you find here or perhaps sending me an email if something serious is discovered :)

~~Hi thanks for your response, I don't mind doing that :)~~

manunio commented 1 year ago

hi @manunio i would prefer not to sign up my email for this service, but if you feel like it and don't mind it, I don't see a problem with you signing up and either opening issues you find here or perhaps sending me an email if something serious is discovered :)

Hi @m4b an email is needed for this project to be accepted by oss-fuzz team, sorry for the confusion.

m4b commented 1 year ago

@manunio i thought we agreed your email is sufficient? Or they specifically need my email?

manunio commented 1 year ago

@manunio i thought we agreed your email is sufficient? Or they specifically need my email?

Yes they specially need your email, as this guarantees someone from the project team is receiving security/bug reports, Sorry for the confusion.

m4b / goblin

Integration with oss-fuzz fuzzing service #334