Why is this needed?
OpenSSF Scorecard flags the lack of fuzz testing. To improve the score, we need to integrate with OSS-Fuzz or ClusterFuzzLite.
Which area does this relate to?
No response
Solution
Integrate ClusterFuzzLite with GitHub Actions. This runs fuzzing on PRs and continuously on the main branch.
Fuzz targets (priority):
- Parser - Pydantic event validation
- Event Source Data Classes - SQS, SNS, API Gateway, Kinesis parsing
- Validation - JSON Schema validation
- Kafka - Avro, Protobuf, JSON Schema deserialization
Acknowledgment
Why is this needed?
OpenSSF Scorecard flags the lack of fuzz testing. To improve the score, we need to integrate with OSS-Fuzz or ClusterFuzzLite.
Which area does this relate to?
No response
Solution
Integrate ClusterFuzzLite with GitHub Actions. This runs fuzzing on PRs and continuously on the main branch.
Fuzz targets (priority):
Acknowledgment