mirror of
https://github.com/coredns/coredns.git
synced 2025-10-27 08:14:18 -04:00
9f7cc58d67
Replace read-all with contents:read and add explicit permissions to follow principle of least privilege. Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
33 lines
907 B
YAML
33 lines
907 B
YAML
name: CIFuzz
|
|
|
|
on:
|
|
pull_request:
|
|
branches:
|
|
- master
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
Fuzzing:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Build Fuzzers
|
|
id: build
|
|
uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master # cifuzz can't be pinned https://github.com/google/oss-fuzz/issues/6836
|
|
with:
|
|
oss-fuzz-project-name: "go-coredns"
|
|
dry-run: false
|
|
- name: Run Fuzzers
|
|
uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master # cifuzz can't be pinned
|
|
with:
|
|
oss-fuzz-project-name: "go-coredns"
|
|
fuzz-seconds: 600
|
|
dry-run: false
|
|
- name: Upload Crash
|
|
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
|
|
if: failure() && steps.build.outcome == 'success'
|
|
with:
|
|
name: artifacts
|
|
path: ./out/artifacts
|