search

ossf / scorecard-action

Official GitHub Action for OpenSSF Scorecard.
Apache License 2.0
240 stars 67 forks source link

Detect jvm/kotlin fuzzing by detecting import #1378

Open fab1an opened 2 months ago

fab1an commented 2 months ago

Hi

I have fuzzing in my library, yet Scorecard does not pick it up.

It could find it by detecting an import like this: https://github.com/fab1an/kotlin-json-stream/blob/b526cf3cf8182213fa3b4a5df8d119b4ab741c1d/src/jvmTest/kotlin/com/fab1an/kotlinjsonstream/JsonFuzzTest.kt#L4

import com.code_intelligence.jazzer.junit.FuzzTest