pickle-fuzzer/.github/workflows/action-smoke.yml at 2f164ec76747e93fa01012e08146ec9375d405a9 · cisco-ai-defense/pickle-fuzzer · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
name: Action Smoke Test

on:
  pull_request:
  workflow_dispatch:
    inputs:
      version:
        description: Release tag to install (e.g., v1.2.3). Defaults to latest.
        required: false
        default: latest

permissions:
  contents: read

jobs:
  smoke:
    name: Action Smoke Test (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-latest
            local_binary: target/release/pickle-fuzzer
          - os: macos-latest
            local_binary: target/release/pickle-fuzzer
          - os: windows-latest
            local_binary: target/release/pickle-fuzzer.exe
    defaults:
      run:
        shell: bash
    steps:
      - name: Checkout code
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Install Rust toolchain
        if: ${{ github.event_name == 'pull_request' }}
        uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7
        with:
          toolchain: stable

      - name: Build local binary
        if: ${{ github.event_name == 'pull_request' }}
        run: cargo build --release --locked --bin pickle-fuzzer

      - name: Install pickle-fuzzer
        uses: ./
        with:
          version: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.version || '' }}
          binary_path: ${{ github.event_name == 'pull_request' && matrix.local_binary || '' }}
          mode: cli
          install_only: true

      - name: Verify version
        run: pickle-fuzzer --version

      - name: Generate samples
        uses: ./
        with:
          version: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.version || '' }}
          binary_path: ${{ github.event_name == 'pull_request' && matrix.local_binary || '' }}
          mode: cli
          output_dir: samples
          samples: 5
          protocol: 4

      - name: Verify samples
        run: |
          test -f samples/0.pkl
          ls -la samples

  atheris:
    name: Action Smoke Test (atheris)
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Run Atheris harness
        uses: ./
        with:
          mode: atheris
          harness: python/examples/ci-harness.py
          harness_args: "-max_total_time=5"