diff options
| author | priyawadhwa <priyawadhwa@google.com> | 2021-03-16 12:54:29 -0700 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-03-16 19:54:29 +0000 |
| commit | 02da63c0d6ba540dde837f40948b65be2a44d9b3 (patch) | |
| tree | 05d30ca98e3b06a7be6075486fb99b06724e7581 | |
| parent | 5c174c7e36460405a0094e6e375e8eb81d23dcc3 (diff) | |
| download | oss-fuzz-02da63c0d6ba540dde837f40948b65be2a44d9b3.tar.gz | |
Add cosign project to oss-fuzz (#5415)
| -rw-r--r-- | projects/cosign/Dockerfile | 21 | ||||
| -rwxr-xr-x | projects/cosign/build.sh | 19 | ||||
| -rw-r--r-- | projects/cosign/project.yaml | 8 |
3 files changed, 48 insertions, 0 deletions
diff --git a/projects/cosign/Dockerfile b/projects/cosign/Dockerfile new file mode 100644 index 000000000..f0282dd16 --- /dev/null +++ b/projects/cosign/Dockerfile @@ -0,0 +1,21 @@ +# Copyright 2021 Google LLC +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +FROM gcr.io/oss-fuzz-base/base-builder +RUN git clone --depth 1 https://github.com/sigstore/cosign + +COPY build.sh $SRC/ +WORKDIR $SRC/cosign diff --git a/projects/cosign/build.sh b/projects/cosign/build.sh new file mode 100755 index 000000000..87d865d2c --- /dev/null +++ b/projects/cosign/build.sh @@ -0,0 +1,19 @@ +#!/bin/bash -eu +# Copyright 2021 Google LLC +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + + +compile_go_fuzzer github.com/sigstore/cosign/test FuzzGetPassword fuzz_getPassword gofuzz diff --git a/projects/cosign/project.yaml b/projects/cosign/project.yaml new file mode 100644 index 000000000..dc5735fca --- /dev/null +++ b/projects/cosign/project.yaml @@ -0,0 +1,8 @@ +homepage: https://sigstore.dev/ +language: go +primary_contact: "priyawadhwa@google.com" +main_repo: "https://github.com/sigstore/cosign" +fuzzing_engines: + - libfuzzer +sanitizers: + - address |