search

tink-crypto / tink

Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.
https://developers.google.com/tink
Apache License 2.0
13.5k stars 1.18k forks source link

Enable CIFuzz Github action. #654

Closed DavidKorczynski closed 8 months ago

DavidKorczynski commented 1 year ago

Add CIFuzz workflow action to have fuzzers build and run on each PR. This is a service offered by OSS-Fuzz where tink already runs. CIFuzz can help detect catch regressions and fuzzing build issues early, and has a variety of features (see the URL above). In the current PR the fuzzers gets build on a pull request and will run for 300 seconds.

Signed-off-by: David Korczynski david@adalogics.com

tholenst commented 1 year ago

Thank you for the pull request. Also, I apologize that we didn't respond for almost a year.

I don't think it is at the moment feasible to outsource the building of our fuzzing infrastructure: we need a team member to understand it and make decisions which work for us in the long term. Unfortunately we are pretty tight on time, but I hope we will have time to look at this soon.

I will leave this open since it might be useful, but don't expect anyone to look at it too soon.