Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ci: oss-fuzz workflow added #87

Closed
wants to merge 69 commits into from
Closed

ci: oss-fuzz workflow added #87

wants to merge 69 commits into from

Conversation

ivgonzalezc
Copy link
Contributor

@ivgonzalezc ivgonzalezc commented Apr 16, 2024 •
edited by jira bot
Loading

According to ticket BIPS-18112

@ivgonzalezc ivgonzalezc requested review from a team as code owners April 16, 2024 17:14
ipowellBT
ipowellBT reviewed Apr 17, 2024
View reviewed changes
.github/workflows/cifuzz.yml Outdated
steps:
- name: Build Fuzzers
id: build
uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Recommend pinning to a commit SHA
Ref: Pinned Dependencies

ivgonzalezc and others added 21 commits April 17, 2024 08:25
@ivgonzalezc
Merge branch 'main' into BIPS-18112-oss-fuzz
12329d3
@ivgonzalezc
ci: adding commit sha to action version
e3b25ec
@ivgonzalezc
ci: adding sha to action version
5060332
@ivgonzalezc
feat: adding ci fuzz files
e8c52de
@btfhernandez @ivgonzalezc
feat: use a struct to group validate input function parameters (#116)
12284f1 
* feat: use a struct to group validate input function parameters

* feat: use a struct to group validate input function parameters
@beyondtrust-release-app @ivgonzalezc
chore(main): release 0.6.0 (#117)
117358c 
Co-authored-by: beyondtrust-release-app[bot] <129480450+beyondtrust-release-app[bot]@users.noreply.github.com>
@dependabot @ivgonzalezc
Build(deps): Bump actions/checkout from 4.1.1 to 4.1.7 (#112)
2583d1c 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.1 to 4.1.7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4.1.1...692973e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ivan Gonzalez <[email protected]>
@dependabot @ivgonzalezc
Build(deps): Bump github/codeql-action from 3.24.9 to 3.25.12 (#121)
014280e 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.9 to 3.25.12.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v3.24.9...4fa2a79)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ivan Gonzalez <[email protected]>
@dependabot @ivgonzalezc
Build(deps): Bump jfrog/frogbot from 2.20.0 to 2.21.4 (#122)
2260613 
Bumps [jfrog/frogbot](https://github.com/jfrog/frogbot) from 2.20.0 to 2.21.4.
- [Release notes](https://github.com/jfrog/frogbot/releases)
- [Commits](jfrog/frogbot@00489de...3f4be7e)

---
updated-dependencies:
- dependency-name: jfrog/frogbot
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ivan Gonzalez <[email protected]>
@dependabot @ivgonzalezc
Build(deps): Bump actions/upload-artifact from 3.pre.node20 to 4.3.4 (#…
da068ea 
…120)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.pre.node20 to 4.3.4.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v3-node20...0b2256b)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ivan Gonzalez <[email protected]>
@dependabot @ivgonzalezc
Build(deps): Bump actions/download-artifact from 4.1.4 to 4.1.8 (#118)
de0917b 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.1.4 to 4.1.8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@c850b93...fa0a91b)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ivan Gonzalez <[email protected]>
@ivgonzalezc
fix: security findings resolved and fixed (#130)
74a6cd2 
* fix: security findings resolved and fixed

* fix: security findings reversed on codeql
@dependabot @ivgonzalezc
Build(deps): Bump actions/upload-artifact from 4.3.4 to 4.4.0 (#127)
1d2003d 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.4 to 4.4.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@0b2256b...5076954)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ivan Gonzalez <[email protected]>
@dependabot @ivgonzalezc
Build(deps): Bump github/codeql-action from 3.25.12 to 3.26.10 (#129)
cea7270 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.12 to 3.26.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@4fa2a79...e2b3eaf)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ivan Gonzalez <[email protected]>
@dependabot @ivgonzalezc
Build(deps): Bump jfrog/frogbot from 2.21.4 to 2.21.13 (#126)
de3d80c 
Bumps [jfrog/frogbot](https://github.com/jfrog/frogbot) from 2.21.4 to 2.21.13.
- [Release notes](https://github.com/jfrog/frogbot/releases)
- [Commits](jfrog/frogbot@3f4be7e...0040362)

---
updated-dependencies:
- dependency-name: jfrog/frogbot
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ivan Gonzalez <[email protected]>
@dependabot @ivgonzalezc
Build(deps): Bump sonarsource/sonarqube-scan-action from 2.0.2 to 3.0…
853a364 
….0 (#125)

Bumps [sonarsource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) from 2.0.2 to 3.0.0.
- [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases)
- [Commits](SonarSource/sonarqube-scan-action@53c3e32...884b794)

---
updated-dependencies:
- dependency-name: sonarsource/sonarqube-scan-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ivan Gonzalez <[email protected]>
@dependabot @ivgonzalezc
Build(deps): Bump ossf/scorecard-action from 2.3.1 to 2.4.0 (#124)
db3bbec 
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.1 to 2.4.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@0864cf1...62b2cac)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ivan Gonzalez <[email protected]>
@ivgonzalezc
fix: artifactory documentation updated (#131)
d2db8ac
@btfhernandez @ivgonzalezc
chore: Remove Get Help section from Go-Client-Library-PasswordSafe re…
f7cf964 
…po (#135)
@btfhernandez @ivgonzalezc
feat: Support API Key Authentication (#139)
79ed05c
@btfhernandez @ivgonzalezc
feat: launch please release app (#140)
34cb904
ivgonzalezc and others added 26 commits January 14, 2025 18:22
@ivgonzalezc @Fcogollo-BT
CI: promotion workflow refactored (#178)
407f968 
Co-authored-by: Francisco Cogollo <[email protected]>
@Fcogollo-BT @ivgonzalezc
CI: adding PR template and workflow to validate (#179)
d0240df
@btfhernandez @ivgonzalezc
feat: add api version parameter (#180)
3be5ec8 
* feat: add api version parameter

* feat: improve api version definition
@ivgonzalezc
CI: build.sh & Dockerfile updated
f39faf5
@ivgonzalezc
CI: oss-fuzzing workflow created
1f37b30
@ivgonzalezc
CI: oss-fuzzing workflow updated
0fc1d59
@ivgonzalezc
CI: oss-fuzzing workflow updated
a29cf93
@ivgonzalezc
CI: oss-fuzzing build.sh updated
14db7e7
@ivgonzalezc
CI: oss-fuzzing build.sh updated
d6376a6
@ivgonzalezc
CI: oss-fuzzing Dockerfile updated
e3f305f
@ivgonzalezc
CI: oss-fuzzing build.sh updated
23d0a0a
@ivgonzalezc
CI: oss-fuzzing build.sh updated
b1922ae
@ivgonzalezc
CI: oss-fuzzing build.sh updated
3e0beb3
@ivgonzalezc
CI: oss-fuzzing build.sh updated
9477cd1
@ivgonzalezc
CI: oss-fuzzing build.sh updated
22dd279
@ivgonzalezc
CI: oss-fuzzing build.sh updated
bbdb39c
@ivgonzalezc
CI: oss-fuzzing build.sh updated
bff8df9
@ivgonzalezc
CI: oss-fuzzing build.sh updated
dbb561c
@ivgonzalezc
CI: oss-fuzzing build.sh updated
c3f2c07
@ivgonzalezc
CI: oss-fuzzing build.sh updated
8480c16
@ivgonzalezc
CI: oss-fuzzing build.sh updated
082779f
@ivgonzalezc
CI: oss-fuzzing build.sh updated
bbbc812
@ivgonzalezc
CI: build.sh & Dockerfile updated
3be88d3
@ivgonzalezc
CI: build.sh & Dockerfile updated
8aa74ce
@ivgonzalezc
CI: Merge branch main into BIPS-18112-oss-fuzz
a08d1cf
@ivgonzalezc
CI: Merge branch main into BIPS-18112-oss-fuzz
753f421
@ivgonzalezc ivgonzalezc deleted the BIPS-18112-oss-fuzz branch January 17, 2025 16:40
@ivgonzalezc ivgonzalezc restored the BIPS-18112-oss-fuzz branch January 17, 2025 16:41
@ivgonzalezc ivgonzalezc deleted the BIPS-18112-oss-fuzz branch January 17, 2025 16:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ipowellBT ipowellBT ipowellBT left review comments

@thejurysays thejurysays thejurysays approved these changes

Assignees
No one assigned
Labels
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
6 participants
@ivgonzalezc @thejurysays @ipowellBT @btfhernandez @Fcogollo-BT @dtejadav