Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Auto-Fuzz: Use OSS-Fuzz docker container to complete fuzzer generation #1313

Merged
merged 3 commits into from
Nov 14, 2023

Conversation

arthurscchan
Copy link
Contributor

Following #1312, this PR uses the newly created OSS-Fuzz base file templates to run the fuzzer generation process. This eliminate the need to install separate virtual environment and dependencies for the Auto-fuzz user.

This PR needs rebase after #1312 is merged in.

##########################################################################
FROM gcr.io/oss-fuzz-base/base-builder-python

RUN pip3 install --upgrade pip && pip3 install cython

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 2: pipCommand not pinned by hash
Click Remediation section below to solve this issue
##########################################################################
FROM gcr.io/oss-fuzz-base/base-builder-python

RUN pip3 install --upgrade pip && pip3 install cython

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 2: pipCommand not pinned by hash
Click Remediation section below to solve this issue
Comment on lines 28 to 30
RUN cd /fuzz-introspector && \
pip3 install -r ./requirements.txt && \
echo "python3 /fuzz-introspector/tools/auto-fuzz/fuzzer_generator/build.py" > $SRC/build.sh

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 2: pipCommand not pinned by hash
Click Remediation section below to solve this issue
@arthurscchan arthurscchan force-pushed the docker-fuzzer-generation branch 2 times, most recently from 914ae86 to d8cea2a Compare November 14, 2023 16:46
Signed-off-by: Arthur Chan <arthur.chan@adalogics.com>
Signed-off-by: Arthur Chan <arthur.chan@adalogics.com>
@arthurscchan arthurscchan force-pushed the docker-fuzzer-generation branch from d8cea2a to a75bc50 Compare November 14, 2023 16:48
Signed-off-by: Arthur Chan <arthur.chan@adalogics.com>
@arthurscchan arthurscchan marked this pull request as ready for review November 14, 2023 17:07
@DavidKorczynski DavidKorczynski merged commit 33ddc92 into ossf:main Nov 14, 2023
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants