strimzi / strimzi-kafka-operator

Apache Kafka® running on Kubernetes
https://strimzi.io/
Apache License 2.0
4.83k stars 1.29k forks source link

[Enhancement]: Add fuzz-testing #10498

Open harshitasao opened 2 months ago

harshitasao commented 2 months ago

Related problem

Fuzz testing or Fuzzing is a Black Box software testing technique, which basically consists in finding implementation bugs using malformed/semi-malformed data injection in an automated fashion.

It will improve the project's security posture.

Part of #10457

Suggested solution

Integrate the project with OSS-Fuzz by following the instructions here.

Alternatives

No response

Additional context

Maintainers help is highly appreciated. For example, helping in identifying the components where fuzz testing will be added.

scholzj commented 1 month ago

Discussed on the community call on 5.9.2024: This seems like something what could be useful. We would need more investigation on how exactly it would work etc. @im-konge will have a look at it.