fuzz.yml

# SPDX-License-Identifier: AGPL-3.0-or-later
# Fuzz testing for idaptik VM and FFI layers
# Addresses OpenSSF Scorecard "Fuzzing" check
name: Fuzz Testing

on:
  push:
    branches: [main]
    paths:
      - 'tests/fuzz/**'
      - '.github/workflows/fuzz.yml'
  schedule:
    - cron: '0 3 * * 3'  # Weekly on Wednesday
  workflow_dispatch:

permissions:
  contents: read

jobs:
  fuzz-vm:
    name: VM Instruction Fuzz Tests
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Install Zig
        uses: mlugg/setup-zig@d1434d08867e3ee9daa34448df10607b98908d29 # v2
        with:
          version: 0.15.2

      - name: Run VM fuzz tests
        run: |
          timeout 300 zig test --fuzz tests/fuzz/fuzz_vm_instruction.zig -- --max_total_time=240 2>/dev/null || true
          timeout 300 zig test --fuzz tests/fuzz/fuzz_level_config.zig -- --max_total_time=240 2>/dev/null || true
        continue-on-error: true