smithy-java/.github/workflows/fuzz-testing.yml at b1fad4595494207c10f991a65c22207f214975bc · smithy-lang/smithy-java · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
name: Fuzz Testing

on:
  # Run daily at 2 AM UTC
  schedule:
    - cron: '0 2 * * *'

  # Allow manual trigger
  workflow_dispatch:

permissions:
  contents: read

jobs:
  fuzz:
    runs-on: ubuntu-latest
    name: Fuzz Testing

    steps:
      - uses: actions/checkout@v6

      - name: Set up JDK 21
        uses: actions/setup-java@v5
        with:
          java-version: 21
          distribution: 'corretto'

      - name: Cache compiled buildscripts
        uses: actions/cache@v5
        with:
          key: ${{ runner.os }}-gradle-${{ hashFiles('buildSrc/**/*.kts') }}
          path: |
            ./buildSrc/build

      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@v5
        with:
          cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}
          gradle-home-cache-includes: |
            caches

      - name: Restore fuzz corpus cache
        uses: actions/cache/restore@v5
        with:
          key: fuzz-corpus-${{ github.run_id }}
          restore-keys: |
            fuzz-corpus-
          path: |
            **/.cifuzz-corpus/
            **/src/fuzz/resources/corpus/

      - name: Run all fuzz tests
        run: |
          ./gradlew fuzz -Pfuzz.maxDuration=4h --stacktrace

      - name: Save fuzz corpus cache
        uses: actions/cache/save@v5
        if: always()
        with:
          key: fuzz-corpus-${{ github.run_id }}
          path: |
            **/.cifuzz-corpus/
            **/src/fuzz/resources/corpus/

      - name: Upload fuzz test reports
        uses: actions/upload-artifact@v6
        if: always()
        with:
          name: fuzz-test-reports
          path: '**/build/reports/fuzz-coverage/**'

      - name: Upload crash artifacts
        uses: actions/upload-artifact@v6
        if: failure()
        with:
          name: fuzz-crashes
          path: |
            **/crash-*
            **/leak-*
            **/timeout-*