build_and_fuzz.yml

name: Build and Fuzz

on: [push, pull_request]

jobs:
  fuzz_msan:
    name: fuzz with MemorySanitizer
    runs-on: ubuntu-latest
    container: ghcr.io/yubico/yubihsm-shell/fuzzing-msan:latest

    steps:

      - name: clone the Yubico/yubihsm-shell repository
        uses: actions/checkout@v3
        with:
          path: yubihsm-shell

      - name: do build
        working-directory: yubihsm-shell
        run: |
          cmake                   \
            -DFUZZING=ON          \
            -DFUZZING_MSAN=ON     \
            -DWITHOUT_MANPAGES=ON \
            -DDISABLE_LTO=ON      \
            -DENABLE_STATIC=ON    \
            -B build-msan
          cmake --build build-msan

  fuzz_asan:
    name: fuzz with AddressSanitizer
    runs-on: ubuntu-latest
    container: ubuntu:23.04

    steps:

      - name: install dependencies from package management
        env:
          DEBIAN_FRONTEND: noninteractive
        run: |
          apt -q -y update
          apt -q -y install                                                            \
            llvm-16 clang-16 lld-16                                                         \
            build-essential cmake ninja-build pkg-config                                    \
            libedit-dev libcurl4-openssl-dev libusb-1.0-0-dev gengetopt libpcsclite-dev

      - name: clone the Yubico/yubihsm-shell repository
        uses: actions/checkout@v3
        with:
          path: yubihsm-shell

      - name: do build
        working-directory: yubihsm-shell
        run: |
          cmake
            -DFUZZING=ON          \
            -DWITHOUT_MANPAGES=ON \
            -DDISABLE_LTO=ON      \
            -DENABLE_STATIC=ON    \
            -B build-asan
          cmake --build build-asan