OSS-Fuzz Integration

Question

OSS-Fuzz Integration

ennamarie19 opened this issue a year ago · 3 comments

My name is McKenna Dallmeyer and I would like to submit python-dotenv to OSS-Fuzz. If you are not familiar with the project, OSS-Fuzz is Google's platform for continuous fuzzing of Open Source Software. In order to get the most out of this program, it would be greatly beneficial to be able to merge-in my fuzz harness and build scripts into the upstream repository and contribute bug fixes if they come up. Is this something that you would support me putting the effort into?

Thank you!

Answer 1 · 2023-12-07T13:18:39.000Z

@ennamarie19 I don't complete understand the request and what's needed from me. If you can share any instance of this in motion, I'll be happy to look into it.

Answer 2 · 2023-12-12T18:47:41.000Z

Hi! I have done this for the repository collective/icalendar on GitHub that you could take a look at as an example. I would just need you to eventually merge the harness and bug fixes that I write for the project. For now, I would just need an email of someone who would like to be notified of bugs and also would like to have access to the OSS-Fuzz dashboard. I will include this in a project.yaml file that will be submitted to OSS-Fuzz for review. Once they approve of the project, I can start writing the fuzz harness for python-dotenv. Thanks! On Thursday, December 7, 2023 at 08:18:52 AM EST, Saurabh Kumar ***@***.***> wrote: @ennamarie19 I don't complete understand the request and what's needed from me. If you can share any instance of this in motion, I'll be happy to look into it. — Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you were mentioned.Message ID: ***@***.***>

Answer 3 · 2024-05-19T18:49:04.000Z

Hello @theskumar!
Just wanted to circle back with you on this effort. To reiterate, this will not require any lift on your end beyond merging the fuzzer once I complete it.

Thank you!