diff --git a/projects/rekor/Dockerfile b/projects/rekor/Dockerfile new file mode 100644 index 000000000..04d24a12d --- /dev/null +++ b/projects/rekor/Dockerfile @@ -0,0 +1,21 @@ +# Copyright 2022 Google LLC +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +FROM gcr.io/oss-fuzz-base/base-builder-go +RUN git clone --depth 1 https://github.com/sigstore/rekor + +COPY build.sh $SRC +WORKDIR $SRC/rekor/pkg diff --git a/projects/rekor/build.sh b/projects/rekor/build.sh new file mode 100644 index 000000000..4d29a526c --- /dev/null +++ b/projects/rekor/build.sh @@ -0,0 +1,29 @@ +#!/bin/bash -eu +# Copyright 2022 Google LLC +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +go install github.com/AdamKorcz/go-118-fuzz-build@latest +go get github.com/AdamKorcz/go-118-fuzz-build/utils + +compile_native_go_fuzzer github.com/sigstore/rekor/pkg/sharding FuzzCreateEntryIDFromParts FuzzCreateEntryIDFromParts +compile_native_go_fuzzer github.com/sigstore/rekor/pkg/sharding FuzzGetUUIDFromIDString FuzzGetUUIDFromIDString +compile_native_go_fuzzer github.com/sigstore/rekor/pkg/sharding FuzzGetTreeIDFromIDString FuzzGetTreeIDFromIDString +compile_native_go_fuzzer github.com/sigstore/rekor/pkg/sharding FuzzPadToTreeIDLen FuzzPadToTreeIDLen +compile_native_go_fuzzer github.com/sigstore/rekor/pkg/sharding FuzzReturnEntryIDString FuzzReturnEntryIDString +compile_native_go_fuzzer github.com/sigstore/rekor/pkg/sharding FuzzTreeID FuzzTreeID +compile_native_go_fuzzer github.com/sigstore/rekor/pkg/sharding FuzzValidateUUID FuzzValidateUUID +compile_native_go_fuzzer github.com/sigstore/rekor/pkg/sharding FuzzValidateTreeID FuzzValidateTreeID +compile_native_go_fuzzer github.com/sigstore/rekor/pkg/sharding FuzzValidateEntryID FuzzValidateEntryID diff --git a/projects/rekor/project.yaml b/projects/rekor/project.yaml new file mode 100644 index 000000000..f5e4c0aa8 --- /dev/null +++ b/projects/rekor/project.yaml @@ -0,0 +1,14 @@ +homepage: "https://sigstore.dev" +main_repo: "https://github.com/sigstore/rekor" +primary_contact: "bcallaway@sigstore.dev" +auto_ccs: + - naveensrinivasan@protonmail.com + - dlorenc@sigstore.dev + - lhinds@sigstore.dev + - hblauzvern@sigstore.dev + - asraa@sigstore.dev +language: go +fuzzing_engines: + - libfuzzer +sanitizers: + - address