Rooba
/
oss-fuzz
mirror of https://github.com/google/oss-fuzz.git
1
1
Fork 0
Code Issues Packages Projects Releases Wiki Activity
oss-fuzz/infra/cifuzz/external-actions/build_fuzzers/action.yml

71 lines
2.4 KiB
YAML
Raw Normal View History

Add external actions. (#6086) This will be used for testing and can be moved elsewhere later.
2021-07-22 22:19:10 +00:00
# action.yml
name: 'build-fuzzers'
description: "Builds an OSS-Fuzz project's fuzzers."
inputs:
language:
description: 'Programming language project is written in.'
required: false
default: 'c++'
dry-run:
description: 'If set, run the action without actually reporting a failure.'
default: false
allowed-broken-targets-percentage:
description: 'The percentage of broken targets allowed in bad_build_check.'
required: false
sanitizer:
description: 'The sanitizer to build the fuzzers with.'
default: 'address'
project-src-path:
description: "The path to the project's source code checkout."
required: false
bad-build-check:
description: "Whether or not OSS-Fuzz's check for bad builds should be done."
required: false
default: true
This allows users to skip CIFuzz's logic to only run affected fuzz (#7256) targets. Fixes: https://github.com/google/clusterfuzzlite/issues/85
2022-02-10 22:11:52 +00:00
keep-unaffected-fuzz-targets:
description: "Whether to keep unaffected fuzzers or delete them."
required: false
default: false
Add a Git backed filestore. (#6088) - Add storage-repo, storage-repo-branch, and storage-repo-branch-coverage fields to the actions, to indicate that the Git filestore should be used. - The CI provided filestore is still used for crashes and builds. - Replace generic Filestore.upload_directory with typed upload methods which matches the download methods. - Rename upload_latest_build to upload_build to make it more generic. - Make artifact name prefixes an implementation detail of the store. For #6052.
2021-07-27 00:46:20 +00:00
storage-repo:
description: |
The git repo to use for storing certain artifacts from fuzzing.
required: false
storage-repo-branch:
description: |
The branch of the git repo to use for storing certain artifacts from
fuzzing.
required: false
storage-repo-branch-coverage:
description: |
The branch of the git repo to use for storing coverage reports.
required: false
Don't upload builds in run_fuzzers. (#6151) The current way adds a lot of ordering assumptions, and doesn't fit too well with parallel batch fuzzing either. Add a "upload-build" boolean action input that can be added to "build_fuzzers" to upload latest builds instead. Builds are now uploaded by commit hash, rather than a fixed "latest" name. ClusterFuzzLite's download_latest_build will check the last 3 commits and download the first available build by git hash.
2021-08-17 06:36:06 +00:00
upload-build:
description: |
If set, will upload the build.
default: false
[cifuzz] Implement get_files_covered_by_target for external users (#6132) This should mostly complete support for affected fuzzers for external users. This implementation is still imperfect however. It relies on the name of the repo being the same as the name of the directory in $SRC/ that the repo is checked out in (i.e. repo must be checked out in $SRC/$REPO_NAME).
2021-07-29 13:35:01 +00:00
github-token:
description: |
Token for GitHub API. WARNING: THIS SHOULD NOT BE USED IN PRODUCTION YET
You should use "secrets.GITHUB_TOKEN" in your workflow file, do not
hardcode the token.
TODO(https://github.com/google/oss-fuzz/pull/5841#discussion_r639393361):
Document locking this down.
required: false
Add external actions. (#6086) This will be used for testing and can be moved elsewhere later.
2021-07-22 22:19:10 +00:00
runs:
using: 'docker'
image: '../../../build_fuzzers.Dockerfile'
env:
OSS_FUZZ_PROJECT_NAME: ${{ inputs.oss-fuzz-project-name }}
LANGUAGE: ${{ inputs.language }}
DRY_RUN: ${{ inputs.dry-run}}
ALLOWED_BROKEN_TARGETS_PERCENTAGE: ${{ inputs.allowed-broken-targets-percentage}}
SANITIZER: ${{ inputs.sanitizer }}
PROJECT_SRC_PATH: ${{ inputs.project-src-path }}
[cifuzz] Implement get_files_covered_by_target for external users (#6132) This should mostly complete support for affected fuzzers for external users. This implementation is still imperfect however. It relies on the name of the repo being the same as the name of the directory in $SRC/ that the repo is checked out in (i.e. repo must be checked out in $SRC/$REPO_NAME).
2021-07-29 13:35:01 +00:00
GITHUB_TOKEN: ${{ inputs.github-token }}
Add external actions. (#6086) This will be used for testing and can be moved elsewhere later.
2021-07-22 22:19:10 +00:00
LOW_DISK_SPACE: 'True'
BAD_BUILD_CHECK: ${{ inputs.bad-build-check }}
Don't upload builds in run_fuzzers. (#6151) The current way adds a lot of ordering assumptions, and doesn't fit too well with parallel batch fuzzing either. Add a "upload-build" boolean action input that can be added to "build_fuzzers" to upload latest builds instead. Builds are now uploaded by commit hash, rather than a fixed "latest" name. ClusterFuzzLite's download_latest_build will check the last 3 commits and download the first available build by git hash.
2021-08-17 06:36:06 +00:00
UPLOAD_BUILD: ${{ inputs.upload-build }}
cifuzz: set log level to info by default. (#6604) Also fix some logging issues: - Don't output every single stacktrace when determining if a crash is reproducible. It outputs too many things into the logs and makes it hard to read. - Log OSS-Fuzz corpus path - Fix a minor typo and an error log with deleting the xenial image.
2021-10-26 02:18:17 +00:00
CIFUZZ_DEBUG: 'True'
Make a better api for platform specific config. (#6708) 1. Move most of the generic stuff into BasePlatformConfig. 2. Make a GCB platform config that sets WORKSPACE and PROJECT_SRC_PATH so users don't have to. 3. Make a skeleton prow platform_config for Mitchel to fill out. 4. Make users explicitly specify the CFL_PLATFORM so we can pick CI environments
2021-11-01 12:29:38 +00:00
CFL_PLATFORM: 'github'
This allows users to skip CIFuzz's logic to only run affected fuzz (#7256) targets. Fixes: https://github.com/google/clusterfuzzlite/issues/85
2022-02-10 22:11:52 +00:00
KEEP_UNAFFECTED_FUZZ_TARGETS: ${{ inputs.keep-unaffected-fuzz-targets }}