eblume/kingfisher
1
0
Fork 0
forked from mirrors/kingfisher
Code Pull requests Activity Actions

openssf scorecard suggested improvements

Browse source 
Made-with: Cursor
This commit is contained in:
Mick Grove 2026-03-19 23:38:17 -07:00
commit 5fa4ce59b7
16 changed files with 204 additions and 39 deletions
Download patch file Download diff file Expand all files Collapse all files

33
.github/workflows/cflite_batch.yml vendored Normal file
View file

@ -0,0 +1,33 @@
name: ClusterFuzzLite batch fuzzing
on:
schedule:
- cron: '0 3 * * 1' # Weekly on Monday at 03:00 UTC
permissions: read-all
jobs:
BatchFuzzing:
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
sanitizer:
- address
steps:
- name: Build Fuzzers (${{ matrix.sanitizer }})
id: build
uses: google/clusterfuzzlite/actions/build_fuzzers@v1
with:
language: rust
sanitizer: ${{ matrix.sanitizer }}
- name: Run Fuzzers (${{ matrix.sanitizer }})
id: run
uses: google/clusterfuzzlite/actions/run_fuzzers@v1
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
fuzz-seconds: 3600
mode: 'batch'
sanitizer: ${{ matrix.sanitizer }}
output-sarif: true

38
.github/workflows/cflite_pr.yml vendored Normal file
View file

@ -0,0 +1,38 @@
name: ClusterFuzzLite PR fuzzing
on:
pull_request:
branches:
- main
permissions: read-all
jobs:
PR:
runs-on: ubuntu-latest
concurrency:
group: ${{ github.workflow }}-${{ matrix.sanitizer }}-${{ github.ref }}
cancel-in-progress: true
strategy:
fail-fast: false
matrix:
sanitizer:
- address
steps:
- name: Build Fuzzers (${{ matrix.sanitizer }})
id: build
uses: google/clusterfuzzlite/actions/build_fuzzers@v1
with:
language: rust
github-token: ${{ secrets.GITHUB_TOKEN }}
sanitizer: ${{ matrix.sanitizer }}
- name: Run Fuzzers (${{ matrix.sanitizer }})
id: run
uses: google/clusterfuzzlite/actions/run_fuzzers@v1
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
fuzz-seconds: 300
mode: 'code-change'
sanitizer: ${{ matrix.sanitizer }}
output-sarif: true

10
.github/workflows/ci.yml vendored
View file

@ -36,7 +36,7 @@ jobs:
with:
toolchain: ${{ env.RUST_TOOLCHAIN }}
- uses: swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
- uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
with:
shared-key: kingfisher-${{ runner.os }}-${{ runner.arch }}
cache-on-failure: true
@ -72,7 +72,7 @@ jobs:
with:
toolchain: ${{ env.RUST_TOOLCHAIN }}
- uses: swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
- uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
with:
shared-key: kingfisher-${{ runner.os }}-${{ runner.arch }}
cache-on-failure: true
@ -96,7 +96,7 @@ jobs:
- uses: dtolnay/rust-toolchain@efa25f7f19611383d5b0ccf2d1c8914531636bf9 # master
with:
toolchain: ${{ env.RUST_TOOLCHAIN }}
- uses: swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
- uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
with:
shared-key: kingfisher-${{ runner.os }}-${{ runner.arch }}
cache-on-failure: true
@ -132,7 +132,7 @@ jobs:
toolchain: ${{ env.RUST_TOOLCHAIN }}
- name: Set up MSYS2
uses: msys2/setup-msys2@61f9e5e925871ba6c9e3e8da24ede83ea27fa91f # v2.27.0
uses: msys2/setup-msys2@4f806de0a5a7294ffabaff804b38a9b435a73bda # v2.30.0
with:
msystem: ${{ matrix.msystem }}
update: true
@ -140,7 +140,7 @@ jobs:
make
git
- uses: swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
- uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
with:
shared-key: kingfisher-${{ runner.os }}-${{ runner.arch }}
cache-on-failure: true

14
.github/workflows/release.yml vendored
View file

@ -45,7 +45,7 @@ jobs:
with:
toolchain: ${{ env.RUST_TOOLCHAIN }}
- uses: swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
- uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
with:
shared-key: kingfisher-${{ runner.os }}-${{ runner.arch }}
cache-on-failure: true
@ -120,7 +120,7 @@ jobs:
with:
toolchain: ${{ env.RUST_TOOLCHAIN }}
- uses: swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
- uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
with:
shared-key: kingfisher-${{ runner.os }}-${{ runner.arch }}
cache-on-failure: true
@ -185,7 +185,7 @@ jobs:
with:
toolchain: ${{ env.RUST_TOOLCHAIN }}
- uses: swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
- uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
with:
shared-key: kingfisher-${{ runner.os }}-${{ runner.arch }}
cache-on-failure: true
@ -224,7 +224,7 @@ jobs:
with:
toolchain: ${{ env.RUST_TOOLCHAIN }}
- uses: swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
- uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
with:
shared-key: kingfisher-${{ runner.os }}-${{ runner.arch }}
cache-on-failure: true
@ -274,7 +274,7 @@ jobs:
toolchain: ${{ env.RUST_TOOLCHAIN }}
- name: Set up MSYS2
uses: msys2/setup-msys2@61f9e5e925871ba6c9e3e8da24ede83ea27fa91f # v2.27.0
uses: msys2/setup-msys2@4f806de0a5a7294ffabaff804b38a9b435a73bda # v2.30.0
with:
msystem: ${{ matrix.msystem }}
update: true
@ -282,7 +282,7 @@ jobs:
make
git
- uses: swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
- uses: swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
with:
shared-key: kingfisher-${{ runner.os }}-${{ runner.arch }}
cache-on-failure: true
@ -390,7 +390,7 @@ jobs:
# ── create the release using just that snippet ─────────────────────
- name: Create release & upload assets
uses: ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174 # v1.16.0
uses: ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd # v1.21.0
with:
tag: ${{ steps.version.outputs.tag }}
name: "Kingfisher ${{ steps.version.outputs.tag }}"