Fuzz

ci: Update ci-actions (#19) #14

	name: Fuzz

	on:
	push:
	branches: [main]
	tags-ignore: ['v*']
	pull_request:
	branches: [main]
	schedule:
	- cron: '17 4 * * 1'

	permissions:
	contents: read

	jobs:
	security-scan:
	runs-on: ubuntu-latest
	timeout-minutes: 5
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
	with:
	fetch-depth: 0
	persist-credentials: false

	- name: Pipelock Scan
	uses: luckyPipewrench/pipelock@cef4f47eb99ffe00e20fa7d1423bff1a44742dbe # v2.4.0
	with:
	scan-diff: 'true'
	fail-on-findings: 'true'
	test-vectors: 'false'
	exclude-paths: \|
	tests/conformance/

	atheris:
	needs: [security-scan]
	runs-on: ubuntu-latest
	timeout-minutes: 10
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
	with:
	persist-credentials: false

	- name: Set up Python
	uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
	with:
	python-version: '3.11'

	- name: Install locked fuzz dependencies
	run: python -m pip install --require-hashes -r requirements/fuzz.txt

	- name: Atheris receipt parser smoke
	run: python fuzz/receipt_fuzzer.py -runs=256

Provide feedback