[REQ] openssf Fuzzing

[sozercan]

What kind of request is this?

None

What is your request or suggestion?

      {
        "name": "Fuzzing",
        "score": 0,
        "reason": "project is not fuzzed",
        "details": ["Warn: no fuzzer integrations found"],
        "documentation":
          {
            "short": "Determines if the project uses fuzzing.",
            "url": "https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing",
          },
      },

Are you willing to submit PRs to contribute to this feature request?

• Yes, I am willing to implement it.

[blazethunderstorm]

@sozercan i have resolvd this issue

[amanycodes]

@sozercan I was confused as to:

This check tries to determine if the project uses fuzzing by checking:

1. if the repository name is included in the OSS-Fuzz project list;
2. if ClusterFuzzLite is deployed in the repository;
3. if there are user-defined language-specified fuzzing functions in the repository.
   currently only supports Go fuzzing,
   a limited set of property-based testing libraries for Haskell including QuickCheck, Hedgehog, validity or SmallCheck,
   a limited set of property-based testing libraries for JavaScript and TypeScript including fast-check.
   a limited set of property-based testing libraries for Erlang, including proper and quickcheck.

Do we need to do both 1 AND 2 or just anyone of the two will be accepted as passing check here? and what is our preference from the two if that were the case?

[github-actions]

This issue has been automatically marked as stale because it has not had
recent activity. It will be closed if no further activity occurs.
Thank you for your contributions.