Joyce 3cbb8c9d6e Show minimal permission needed for CIFuzz workflow (#10283) ... I'm suggesting this change in the CIFuzz example workflow to indicate the minimal permission needed for the workflow to run and also to follow the OpenSSF Scorecard Token Permission Check recommendations. I've tested with https://github.com/joycebrum/sigstore/actions/runs/4918728701 and the action ran with success with no permission granted. the actions/upload-artifact skipped does not need permission to upload artifacts as can be seen at https://github.com/joycebrum/sigstore/actions/runs/4928734763 --------- Signed-off-by: Joyce <joycebrum@google.com> Signed-off-by: jonathanmetzman <31354670+jonathanmetzman@users.noreply.github.com> Co-authored-by: jonathanmetzman <31354670+jonathanmetzman@users.noreply.github.com>		2023-06-15 17:16:44 -04:00
..
actions	Optionally write results as SARIF. (#10182)	2023-04-27 17:00:13 -04:00
cifuzz-base	[cifuzz] Install gsutil using pip. (#10159)	2023-04-25 12:20:11 -04:00
external-actions	Optionally write results as SARIF. (#10182)	2023-04-27 17:00:13 -04:00
filestore	Cifuzz upload fix (#9899)	2023-03-16 11:35:55 -04:00
platform_config	cifuzz: gitlab filestore by default on gitlab platform (#7218)	2022-02-01 09:27:02 -05:00
test_data	[CIfuzz] Fix SARIF functionality. (#10349)	2023-05-31 09:33:58 -04:00
CHANGELOG	[CIFuzz] Fix affected fuzz targets. (#7014)	2021-12-14 15:01:22 -05:00
affected_fuzz_targets.py	[CIFuzz] Fix affected fuzz targets. (#7014)	2021-12-14 15:01:22 -05:00
affected_fuzz_targets_test.py	Improve sarif (#10211)	2023-05-02 13:14:09 -04:00
base_runner_utils.py	infra: allow passing architecture=i386 to CIFuzz (#7779)	2022-06-08 15:15:27 -04:00
build-images.sh	…
build_fuzzers.py	[cifuzz][sarif] Fix repo copying and src reporting (#10230)	2023-05-03 15:01:19 -04:00
build_fuzzers_entrypoint.py	…
build_fuzzers_test.py	[CFL] Allow users to specify custom env vars for building/running (#9171)	2022-12-12 11:00:19 -05:00
cifuzz_combined_entrypoint.py	…
cifuzz_end_to_end_test.py	…
cloudbuild.yaml	Fix typo (#6731)	2021-11-01 15:39:27 -04:00
clusterfuzz_deployment.py	WIP: allow running ClusterFuzzLite locally (#9087)	2022-12-14 11:23:15 -05:00
clusterfuzz_deployment_test.py	Make a better api for platform specific config. (#6708)	2021-11-01 12:29:38 +00:00
config_utils.py	Optionally write results as SARIF. (#10182)	2023-04-27 17:00:13 -04:00
config_utils_test.py	Make a better api for platform specific config. (#6708)	2021-11-01 12:29:38 +00:00
continuous_integration.py	infra: allow passing architecture=i386 to CIFuzz (#7779)	2022-06-08 15:15:27 -04:00
continuous_integration_test.py	[CFL] Give docker images unique names to support parallel fuzzing (#7911)	2022-07-12 15:50:10 +02:00
docker.py	[CFL] Give docker images unique names to support parallel fuzzing (#7911)	2022-07-12 15:50:10 +02:00
docker_test.py	infra: allow passing architecture=i386 to CIFuzz (#7779)	2022-06-08 15:15:27 -04:00
environment.py	…
example_cifuzz.yml	Show minimal permission needed for CIFuzz workflow (#10283)	2023-06-15 17:16:44 -04:00
filestore_utils.py	[ClusterFuzzLite] Support local runs (#6987)	2022-01-19 17:24:47 -05:00
filestore_utils_test.py	Make a better api for platform specific config. (#6708)	2021-11-01 12:29:38 +00:00
fuzz_target.py	Improve sarif (#10211)	2023-05-02 13:14:09 -04:00
fuzz_target_test.py	[cifuzz] Fix timeout in reproduce. (#6982)	2021-12-14 11:32:18 -05:00
generate_coverage_report.py	…
generate_coverage_report_test.py	…
get_coverage.py	Fuzz OSS-Fuzz with Atheris and ClusterFuzzLite (#8985)	2022-11-30 15:37:36 -05:00
get_coverage_test.py	Fuzz OSS-Fuzz with Atheris and ClusterFuzzLite (#8985)	2022-11-30 15:37:36 -05:00
http_utils.py	[cifuzz] Add timeout to http requests. (#9084)	2022-11-29 08:32:27 -05:00
http_utils_test.py	…
logs.py	…
package-lock.json	[cifuzz] Upgrade artifact package (#9347)	2023-01-03 16:35:21 -05:00
package.json	[cifuzz] Upgrade artifact package (#9347)	2023-01-03 16:35:21 -05:00
requirements.txt	[cifuzz] Install gsutil using pip. (#10159)	2023-04-25 12:20:11 -04:00
run_cifuzz.py	…
run_fuzzers.py	[cifuzz] Fix sarif upload (#10217)	2023-05-03 08:01:40 -04:00
run_fuzzers_entrypoint.py	Prepare for JavaScript fuzzing (#8325)	2022-08-23 17:41:42 -04:00
run_fuzzers_test.py	[infra] Temporarily skip failing test. (#7323)	2022-03-02 09:07:12 -05:00
sarif_utils.py	[CIfuzz] Fix SARIF functionality. (#10349)	2023-05-31 09:33:58 -04:00
sarif_utils_test.py	[CIfuzz] Fix SARIF functionality. (#10349)	2023-05-31 09:33:58 -04:00
test_helpers.py	Make a better api for platform specific config. (#6708)	2021-11-01 12:29:38 +00:00
workspace_utils.py	[cifuzz][sarif] Fix repo copying and src reporting (#10230)	2023-05-03 15:01:19 -04:00