Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://google.github.io/clusterfuzzlite/
ClusterFuzzLite - Simple continuous fuzzing that runs in CI.
https://google.github.io/clusterfuzzlite/
ci continuous-integration fuzz-testing fuzzing security vulnerabilities
Last synced: 3 months ago
JSON representation
ClusterFuzzLite - Simple continuous fuzzing that runs in CI.
- Host: GitHub
- URL: https://google.github.io/clusterfuzzlite/
- Owner: google
- License: apache-2.0
- Created: 2021-08-26T05:06:10.000Z (about 3 years ago)
- Default Branch: main
- Last Pushed: 2024-06-14T13:17:27.000Z (5 months ago)
- Last Synced: 2024-08-02T15:55:15.535Z (3 months ago)
- Topics: ci, continuous-integration, fuzz-testing, fuzzing, security, vulnerabilities
- Homepage: https://google.github.io/clusterfuzzlite
- Size: 212 KB
- Stars: 450
- Watchers: 18
- Forks: 42
- Open Issues: 25
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
Awesome Lists containing this project
- awesome-software-supply-chain-security - ClusterFuzzLite
README
# ClusterFuzzLite
ClusterFuzzLite is a continuous [fuzzing](https://en.wikipedia.org/wiki/Fuzzing)
solution that runs as part of
[Continuous Integration (CI)](https://en.wikipedia.org/wiki/Continuous_integration)
workflows to find vulnerabilities faster than ever before.
With just a few lines of code, GitHub users can integrate ClusterFuzzLite into
their workflow and fuzz pull requests to catch bugs before they are committed.ClusterFuzzLite is based on [ClusterFuzz](https://google.github.io/clusterfuzz/).
## Features
- Quick code change (pull request) fuzzing to find bugs before they land
- Downloads of crashing testcases
- Continuous longer running fuzzing (batch fuzzing) to asynchronously find
deeper bugs missed during code change fuzzing and build a corpus for
use in code change fuzzing
- Coverage reports showing which parts of your code are fuzzed
- Modular functionality, so you can decide which features you want to use![demo](https://storage.googleapis.com/clusterfuzzlite-public/images/demo.gif)
## Supported Languages
- C
- C++
- Java (and other JVM-based languages)
- Go
- Python
- Rust
- Swift## Supported CI Systems
- GitHub Actions
- GitLab
- Google Cloud Build
- Prow
- Support for more CI systems is in-progess, and extending support to other CI
systems is easy## Documentation
Read our [detailed documentation](https://google.github.io/clusterfuzzlite) to learn how
to use ClusterFuzzLite.## Staying in touch
Join our [mailing list](https://groups.google.com/g/clusterfuzzlite-users) for
announcements and discussions.If you use ClusterFuzzLite, please fill out [this form](https://docs.google.com/forms/d/e/1FAIpQLSdAKB03YM4HjMwNe1K4T6Yr16OE4lCMj-VzThuUOrZUc3ytWw/viewform?usp=sf_link)
so we know who is using it.
This gives us an idea of the impact of ClusterFuzzLite and allows us to
justify future work.Feel free to
[file an issue](https://github.com/google/clusterfuzzlite/issues/new)
if you experience any trouble or have feature requests.