# ClusterFuzzLite PR fuzzing (T4-3): builds every target in
# `fuzz/fuzz_targets/` via `.clusterfuzzlite/` and fuzzes code-change
# coverage on each pull request. No credential needed beyond the default
# `GITHUB_TOKEN` (`contents: read` suffices).

name: cflite-pr

on:
  pull_request:
    branches: ["master"]

permissions:
  contents: read

jobs:
  pr:
    name: pr-fuzz
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - name: Build fuzzers
        uses: google/clusterfuzzlite/actions/build_fuzzers@884713a6c30a92e5e8544c39945cd7cb630abcd1 # v1
        with:
          language: rust
          project-src-path: .
      - name: Run fuzzers (code-change, bounded)
        uses: google/clusterfuzzlite/actions/run_fuzzers@884713a6c30a92e5e8544c39945cd7cb630abcd1 # v1
        with:
          language: rust
          github-token: ${{ secrets.GITHUB_TOKEN }}
          fuzz-seconds: 300
          mode: "code-change"
          report-unreproducible-crashes: false