[test] fuzzer 2nd approach

LuDuda · May 23, 2024 · 232f599 · 232f599
1 parent 1ffbf1a
commit 232f599
Show file tree

Hide file tree

Showing 16 changed files with 131 additions and 3,049 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
@@ -29,9 +29,7 @@
 name: CIFuzz
 
 on:
-  pull_request:
-    branches:
-      - 'main'
+  push
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || (github.repository == 'openthread/openthread' && github.run_id) || github.ref }}
@@ -66,3 +64,133 @@ jobs:
      with:
        name: artifacts
        path: ./out/artifacts
+
+ Fuzzing2:
+   runs-on: ubuntu-20.04
+   steps:
+   - name: Harden Runner
+     uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+     with:
+       egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
+
+   - name: Build Fuzzers
+     uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@c0e4bb8d15a68b7f8cc731ea75523e48a2301bcf # master
+     with:
+       oss-fuzz-project-name: 'openthread'
+       dry-run: false
+   - name: Run Fuzzers
+     uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@c0e4bb8d15a68b7f8cc731ea75523e48a2301bcf # master
+     with:
+       oss-fuzz-project-name: 'openthread'
+       fuzz-seconds: 1800
+       dry-run: false
+   - name: Upload Crash
+     uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
+     if: failure()
+     with:
+       name: artifacts
+       path: ./out/artifacts
+
+ Fuzzing3:
+   runs-on: ubuntu-20.04
+   steps:
+   - name: Harden Runner
+     uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+     with:
+       egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
+
+   - name: Build Fuzzers
+     uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@c0e4bb8d15a68b7f8cc731ea75523e48a2301bcf # master
+     with:
+       oss-fuzz-project-name: 'openthread'
+       dry-run: false
+   - name: Run Fuzzers
+     uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@c0e4bb8d15a68b7f8cc731ea75523e48a2301bcf # master
+     with:
+       oss-fuzz-project-name: 'openthread'
+       fuzz-seconds: 1800
+       dry-run: false
+   - name: Upload Crash
+     uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
+     if: failure()
+     with:
+       name: artifacts
+       path: ./out/artifacts
+
+ Fuzzing4:
+   runs-on: ubuntu-20.04
+   steps:
+   - name: Harden Runner
+     uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+     with:
+       egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
+
+   - name: Build Fuzzers
+     uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@c0e4bb8d15a68b7f8cc731ea75523e48a2301bcf # master
+     with:
+       oss-fuzz-project-name: 'openthread'
+       dry-run: false
+   - name: Run Fuzzers
+     uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@c0e4bb8d15a68b7f8cc731ea75523e48a2301bcf # master
+     with:
+       oss-fuzz-project-name: 'openthread'
+       fuzz-seconds: 1800
+       dry-run: false
+   - name: Upload Crash
+     uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
+     if: failure()
+     with:
+       name: artifacts
+       path: ./out/artifacts
+
+ Fuzzing5:
+   runs-on: ubuntu-20.04
+   steps:
+   - name: Harden Runner
+     uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+     with:
+       egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
+
+   - name: Build Fuzzers
+     uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@c0e4bb8d15a68b7f8cc731ea75523e48a2301bcf # master
+     with:
+       oss-fuzz-project-name: 'openthread'
+       dry-run: false
+   - name: Run Fuzzers
+     uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@c0e4bb8d15a68b7f8cc731ea75523e48a2301bcf # master
+     with:
+       oss-fuzz-project-name: 'openthread'
+       fuzz-seconds: 1800
+       dry-run: false
+   - name: Upload Crash
+     uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
+     if: failure()
+     with:
+       name: artifacts
+       path: ./out/artifacts
+
+ Fuzzing6:
+   runs-on: ubuntu-20.04
+   steps:
+   - name: Harden Runner
+     uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+     with:
+       egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
+
+   - name: Build Fuzzers
+     uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@c0e4bb8d15a68b7f8cc731ea75523e48a2301bcf # master
+     with:
+       oss-fuzz-project-name: 'openthread'
+       dry-run: false
+   - name: Run Fuzzers
+     uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@c0e4bb8d15a68b7f8cc731ea75523e48a2301bcf # master
+     with:
+       oss-fuzz-project-name: 'openthread'
+       fuzz-seconds: 1800
+       dry-run: false
+   - name: Upload Crash
+     uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
+     if: failure()
+     with:
+       name: artifacts
+       path: ./out/artifacts