Add zizmor and dependabot.yml
#7
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| permissions: {} | |
| on: | |
| pull_request: | |
| branches: | |
| - main | |
| paths-ignore: | |
| - '**.md' | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 45 | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ matrix.sanitizer }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| sanitizer: | |
| - address | |
| # - memory Too slow for CI | |
| - undefined | |
| steps: | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| repository: google/oss-fuzz | |
| path: oss-fuzz | |
| persist-credentials: false | |
| - name: Patch Dockerfile to use this ref | |
| run: | | |
| sed -i "s|git clone --depth 1 --branch main https://github.com/python/library-fuzzers.git|git clone --depth 1 --branch ${BRANCH} ${CLONE_URL} library-fuzzers|" \ | |
| oss-fuzz/projects/python3-libraries/Dockerfile | |
| env: | |
| BRANCH: ${{ github.head_ref }} | |
| CLONE_URL: ${{ github.event.pull_request.head.repo.clone_url }} | |
| - name: Build fuzzers | |
| run: | | |
| cd oss-fuzz | |
| python infra/helper.py build_fuzzers python3-libraries \ | |
| --engine libfuzzer \ | |
| --sanitizer ${{ matrix.sanitizer }} \ | |
| --architecture x86_64 | |
| - name: Check build | |
| run: | | |
| cd oss-fuzz | |
| python infra/helper.py check_build python3-libraries \ | |
| --engine libfuzzer \ | |
| --sanitizer ${{ matrix.sanitizer }} \ | |
| --architecture x86_64 |