Skip to content

Add fuzzing for extraction, file type determination, and report generation#1204

Merged
egibs merged 2 commits into
chainguard-dev:mainfrom
egibs:add-fuzzing
Nov 7, 2025
Merged

Add fuzzing for extraction, file type determination, and report generation#1204
egibs merged 2 commits into
chainguard-dev:mainfrom
egibs:add-fuzzing

Conversation

@egibs

@egibs egibs commented Nov 7, 2025

Copy link
Copy Markdown
Member

This PR adds fuzzing for the core functionality around extracting archives, determining file types, and generating reports and also contains a fix/update for the IsValidPath function which the fuzzing exposed.

@egibs egibs marked this pull request as ready for review November 7, 2025 14:30
…ation

Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>

@eslerm eslerm left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

approved with non-blocking comments

Comment thread pkg/report/fuzz_test.go
Comment thread pkg/report/fuzz_test.go Outdated
Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>
@egibs egibs merged commit 2844a83 into chainguard-dev:main Nov 7, 2025
14 checks passed
@egibs egibs deleted the add-fuzzing branch November 9, 2025 14:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants