google / google/yapf

OSS Fuzz Integration

Open
#1,236 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
14k
Forks
904
PR merge metrics
No merged PRs in 30d

Description

Hi there!
I'm reaching out to propose integrating OSS-Fuzz into yapf. Given Google's commitment to security and the proven benefits of OSS-Fuzz in uncovering vulnerabilities, I believe this integration would significantly enhance the robustness and reliability of your codebase.

OSS-Fuzz's ability to continuously fuzz test the project will not only help in identifying potential security issues but also ensure that your code is resilient against various input scenarios. This proactive approach aligns with our shared goal of maintaining high standards of security and stability.

In order to get the most out of this program, it would be greatly beneficial to be able to merge-in my fuzz harness and build scripts into the upstream repository and contribute bug fixes if they come up. Is this something that you would support me putting the effort into?

Thank you! I look forward to hearing from you!

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.