Skip to content

Openssf changes#23

Merged
dmkarthi merged 15 commits into
OpenVisualCloud:mainfrom
sunilnom:openssf_changes
May 25, 2026
Merged

Openssf changes#23
dmkarthi merged 15 commits into
OpenVisualCloud:mainfrom
sunilnom:openssf_changes

Conversation

@sunilnom
Copy link
Copy Markdown
Contributor

@sunilnom sunilnom commented May 25, 2026

Description

Checklist

Code Quality

  • Code follows project style guidelines
  • No unnecessary debug logs or commented-out code
  • No hardcoded values / secrets

Testing

  • Unit test added/modified accordingly
  • Perform manual basic sanity testing at system level

Review Readiness

  • PR title and description are clear and meaningful
  • Story/Task IDs are linked

Documentation

  • README or relevant docs updated (if applicable)

Security

  • No sensitive data exposed (keys, passwords, tokens)
  • Input validation added where needed

PR Type

What kind of change does this PR introduce?

  • Bugfix
  • Feature
  • Code style update (formatting, local variables)
  • Refactoring (no functional changes, no api changes)
  • Documentation content changes
  • Testing
  • Other... Please describe:

sunilnom and others added 13 commits May 22, 2026 18:17
@sunilnom
ci: add Dependabot configuration for GitHub Actions updates
b2a9219
@sunilnom
feat: add AFL fuzzing harness and CI workflow for config parser
37c5329
@dmkarthi
Merge branch 'main' into openssf_changes
17650a8
@sunilnom
fix: add cooldown configuration to Dependabot schedule
ddef34f
@sunilnom
fix: split AFL build into compile+link to avoid MAX_PARAMS_NUM limit
45f4b23
@sunilnom
fix: use minimal compile flags and gcc linker to avoid AFL param limit
a34a603
@sunilnom
fix: move cooldown to update-entry level per zizmor requirement
fab0f6f
@sunilnom
fix: add missing unistd.h include in fuzz harness
3059b20
@sunilnom
fix: use afl-clang-fast for linking to resolve AFL runtime symbols
774e852
@sunilnom
fix: set AFL_I_DONT_CARE_ABOUT_MISSING_CRASHES for CI core_pattern
cb85fda
@sunilnom
fix: sanitize AFL filenames (replace colons) before artifact upload
d7502e3
@sunilnom
ci: add repo_token for OpenSSF Scorecard
2a1ce92
@sunilnom
ci: add standalone Coverity workflow with SARIF upload for SAST
b0be2df 
- Create .github/workflows/coverity.yml as standalone workflow
- Upload Coverity results as SARIF to GitHub Security tab
- OpenSSF Scorecard detects SAST via upload-sarif action
- Remove composite action from .github/actions/analysis/coverity/
- Remove commented-out Coverity references from CI workflows
- All workflows pass zizmor pedantic audit
sunilnom added 2 commits May 25, 2026 11:30
@sunilnom
Add libFuzzer-based fuzz testing workflow for OpenSSF Scorecard detec…
5226699 
…tion

- Add fuzz/fuzz_config_reader_libfuzzer.c with LLVMFuzzerTestOneInput harness
- Add .github/workflows/libfuzzer.yml running ASan + UBSan fuzzing
- Retain existing AFL fuzz workflow unchanged
- No Docker dependency required
@sunilnom
Merge branch 'main' into openssf_changes
4605b98
@dmkarthi
Copy link
Copy Markdown
Collaborator

dmkarthi commented May 25, 2026

LGTM

@dmkarthi dmkarthi merged commit 1942f85 into OpenVisualCloud:main May 25, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@dmkarthi dmkarthi dmkarthi approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@sunilnom @dmkarthi