diff options
| author | jonathanmetzman <31354670+jonathanmetzman@users.noreply.github.com> | 2023-06-05 07:37:34 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-06-05 07:37:34 +0200 |
| commit | 56595a3730d25aa2d80cfa142aef29e6e4895f08 (patch) | |
| tree | ade7cc85ac2d30dbd1b5a687fd806120545a5a56 /.github/workflows/cifuzz.yml | |
| parent | path-util: fix typo in comment (diff) | |
| download | systemd-56595a3730d25aa2d80cfa142aef29e6e4895f08.tar.xz systemd-56595a3730d25aa2d80cfa142aef29e6e4895f08.zip | |
ci: Report results from CIFuzz using SARIF
Upload results from CIFuzz using SARIF.
This will allow CIFuzz to report issues in the security tab.
This is a better UI than having to look through logs.
TODO(google/oss-fuzz#10452): Add proper descriptions of UBSAN bugs.
Diffstat (limited to '.github/workflows/cifuzz.yml')
| -rw-r--r-- | .github/workflows/cifuzz.yml | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml index be22f7c35a..8cf10a2d7e 100644 --- a/.github/workflows/cifuzz.yml +++ b/.github/workflows/cifuzz.yml @@ -35,6 +35,9 @@ jobs: include: - sanitizer: address architecture: i386 + permissions: + security-events: write + steps: - name: Build Fuzzers (${{ matrix.sanitizer }}) id: build @@ -47,6 +50,7 @@ jobs: keep-unaffected-fuzz-targets: true sanitizer: ${{ matrix.sanitizer }} architecture: ${{ matrix.architecture }} + output-sarif: true - name: Run Fuzzers (${{ matrix.sanitizer }}) uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master with: @@ -54,9 +58,17 @@ jobs: fuzz-seconds: 600 dry-run: false sanitizer: ${{ matrix.sanitizer }} + output-sarif: true - name: Upload Crash uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce if: failure() && steps.build.outcome == 'success' with: name: ${{ matrix.sanitizer }}-${{ matrix.architecture }}-artifacts path: ./out/artifacts + - name: Upload Sarif + if: always() && steps.build.outcome == 'success' + uses: github/codeql-action/upload-sarif@0225834cc549ee0ca93cb085b92954821a145866 + with: + # Path to SARIF file relative to the root of the repository + sarif_file: cifuzz-sarif/results.sarif + checkout_path: cifuzz-sarif |