cflite_pr.yml

# SPDX-License-Identifier: PMPL-1.0-or-later
name: ClusterFuzzLite PR
on:
  pull_request:
    paths:
      - '**/*.rs'
permissions:
  contents: read
jobs:
  PR:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        sanitizer: [address, undefined]
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
      - uses: google/clusterfuzzlite/actions/build_fuzzers@884713a6c30a92e5e8544c39945cd7cb630abcd1 # v1
        with:
          sanitizer: ${{ matrix.sanitizer }}
          language: rust
      - uses: google/clusterfuzzlite/actions/run_fuzzers@884713a6c30a92e5e8544c39945cd7cb630abcd1 # v1
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}
          fuzz-seconds: 300
          sanitizer: ${{ matrix.sanitizer }}
          mode: code-change
          output-sarif: true
      - uses: github/codeql-action/upload-sarif@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3
        if: always()
        with:
          sarif_file: vulnerabilities.sarif