cflite_pr.yml

# SPDX-License-Identifier: MPL-2.0
name: ClusterFuzzLite PR
on:
  pull_request:
    paths:
      - '**/*.rs'
      - '.clusterfuzzlite/**'
permissions: read-all
jobs:
  PR:
    runs-on: ubuntu-latest
    timeout-minutes: 20
    strategy:
      fail-fast: false
      matrix:
        sanitizer: [address]
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
      - uses: google/clusterfuzzlite/actions/build_fuzzers@884713a6c30a92e5e8544c39945cd7cb630abcd1 # v1
        with:
          sanitizer: ${{ matrix.sanitizer }}
          language: rust
      - uses: google/clusterfuzzlite/actions/run_fuzzers@884713a6c30a92e5e8544c39945cd7cb630abcd1 # v1
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          fuzz-seconds: 300
          sanitizer: ${{ matrix.sanitizer }}
          mode: code-change
          output-sarif: true
      - uses: github/codeql-action/upload-sarif@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v3
        if: always() && hashFiles('vulnerabilities.sarif') != ''
        with:
          sarif_file: vulnerabilities.sarif