Skip to content

Bump serde_json from 1.0.150 to 1.0.151 in /fuzz #75

Bump serde_json from 1.0.150 to 1.0.151 in /fuzz

Bump serde_json from 1.0.150 to 1.0.151 in /fuzz #75

name: Security evidence tooling
on:
push:
branches:
- main
- temp-dev-2.0.0
pull_request:
branches:
- main
- temp-dev-2.0.0
permissions:
contents: read
env:
CARGO_TERM_COLOR: always
RUST_BACKTRACE: 1
jobs:
sanitizer:
name: ${{ matrix.sanitizer }} sanitizer
runs-on: ubuntu-latest
timeout-minutes: 30
strategy:
fail-fast: false
matrix:
sanitizer:
- address
- thread
steps:
- name: Checkout repository
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Install nightly sanitizer toolchain
run: |
rustup toolchain install nightly --profile minimal --component rust-src
rustup target add --toolchain nightly x86_64-unknown-linux-gnu
- name: Cache Rust build output
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
with:
cache-on-failure: true
- name: Run sanitizer
run: scripts/verify-sanitizer.sh ${{ matrix.sanitizer }}
fuzz-smoke:
name: Fuzz smoke (${{ matrix.target }})
runs-on: ubuntu-latest
timeout-minutes: 20
strategy:
fail-fast: false
matrix:
target:
- owned_lifecycle
- ct_primitives
steps:
- name: Checkout repository
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Install nightly fuzzing toolchain
run: rustup toolchain install nightly --profile minimal
- name: Install cargo-fuzz
run: cargo +nightly install cargo-fuzz --version 0.13.2 --locked
- name: Cache Rust build output
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
with:
cache-on-failure: true
- name: Run bounded fuzz smoke
run: cargo +nightly fuzz run ${{ matrix.target }} -- -max_total_time=20 -timeout=5