-
-
Notifications
You must be signed in to change notification settings - Fork 7
57 lines (50 loc) · 1.59 KB
/
Copy pathbuild.yml
File metadata and controls
57 lines (50 loc) · 1.59 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
name: Build
permissions: {}
on:
pull_request:
branches:
- main
paths-ignore:
- '**.md'
jobs:
build:
runs-on: ubuntu-latest
timeout-minutes: 45
concurrency:
group: ${{ github.workflow }}-${{ matrix.sanitizer }}-${{ github.ref }}
cancel-in-progress: true
strategy:
fail-fast: false
matrix:
sanitizer:
- address
# - memory Too slow for CI
- undefined
steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
repository: google/oss-fuzz
path: oss-fuzz
persist-credentials: false
- name: Patch Dockerfile to use this ref
run: |
sed -i "s|git clone --depth 1 --branch main https://github.com/python/library-fuzzers.git|git clone --depth 1 --branch ${BRANCH} ${CLONE_URL} library-fuzzers|" \
oss-fuzz/projects/python3-libraries/Dockerfile
env:
BRANCH: ${{ github.head_ref }}
CLONE_URL: ${{ github.event.pull_request.head.repo.clone_url }}
- name: Build fuzzers
run: |
cd oss-fuzz
python infra/helper.py build_fuzzers python3-libraries \
--engine libfuzzer \
--sanitizer ${{ matrix.sanitizer }} \
--architecture x86_64
- name: Check build
run: |
cd oss-fuzz
python infra/helper.py check_build python3-libraries \
--engine libfuzzer \
--sanitizer ${{ matrix.sanitizer }} \
--architecture x86_64 \
-e ALLOWED_BROKEN_TARGETS_PERCENTAGE=0