mirror of
https://github.com/curl/curl.git
synced 2026-01-18 17:21:26 +01:00
9f120d2b50
- MSYS2/Cygwin bash shells are now tagged "misfeature". It is not something we can fix. We need these shells, and using documented/necessary settings to use these environments should be allowed without workarounds. - untagged actions within curl's own organization are now also flagged as "action is not pinned to a hash (required by blanket policy)". This seems overkill. Making internal releases would not be helpful or practical. Also considering that the referred internal action uses an unpinned external action anyway (google/oss-fuzz/infra/cifuzz), with near-zero chance to fix. Ref: https://github.com/zizmorcore/zizmor/pull/1517#issuecomment-3759740853 Closes #20339
44 lines
914 B
YAML
44 lines
914 B
YAML
# Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
|
|
#
|
|
# SPDX-License-Identifier: curl
|
|
|
|
name: 'Fuzzer'
|
|
|
|
'on':
|
|
push:
|
|
branches:
|
|
- master
|
|
- '*/ci'
|
|
paths-ignore:
|
|
- '**/*.md'
|
|
- '**/CMakeLists.txt'
|
|
- '.circleci/**'
|
|
- 'appveyor.*'
|
|
- 'CMake/**'
|
|
- 'Dockerfile'
|
|
- 'projects/**'
|
|
- 'tests/data/**'
|
|
pull_request:
|
|
branches:
|
|
- master
|
|
paths-ignore:
|
|
- '**/*.md'
|
|
- '**/CMakeLists.txt'
|
|
- '.circleci/**'
|
|
- 'appveyor.*'
|
|
- 'CMake/**'
|
|
- 'Dockerfile'
|
|
- 'projects/**'
|
|
- 'tests/data/**'
|
|
|
|
concurrency:
|
|
# Hard-coded workflow name to avoid colliding with curl-fuzzer's group
|
|
group: curl-fuzz-${{ github.event.pull_request.number || github.sha }}
|
|
cancel-in-progress: true
|
|
|
|
permissions: {}
|
|
|
|
jobs:
|
|
Fuzzing:
|
|
uses: curl/curl-fuzzer/.github/workflows/ci.yml@master # zizmor: ignore[unpinned-uses]
|