From 6b519296528363bec457987c3ce62f6f7186fc42 Mon Sep 17 00:00:00 2001 From: laurentsimon Date: Mon, 4 Apr 2022 23:11:16 +0000 Subject: [PATCH] Improve Fuzzing doc --- checks/fuzzing.go | 2 +- docs/checks/internal/checks.yaml | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/checks/fuzzing.go b/checks/fuzzing.go index 2387a40e455..2cf08c5c6bc 100644 --- a/checks/fuzzing.go +++ b/checks/fuzzing.go @@ -86,5 +86,5 @@ func Fuzzing(c *checker.CheckRequest) checker.CheckResult { "project is fuzzed in OSS-Fuzz") } - return checker.CreateMinScoreResult(CheckFuzzing, "project is not fuzzed") + return checker.CreateInconclusiveResult(CheckFuzzing, "could not determine if project is fuzzed") } diff --git a/docs/checks/internal/checks.yaml b/docs/checks/internal/checks.yaml index 37310f4daf0..df4c9d6d1ce 100644 --- a/docs/checks/internal/checks.yaml +++ b/docs/checks/internal/checks.yaml @@ -374,9 +374,9 @@ checks: Risk: `Medium` (possible vulnerabilities in code) This check tries to determine if the project uses - [fuzzing](https://owasp.org/www-community/Fuzzing) by checking if the repository - name is included in the [OSS-Fuzz](https://github.com/google/oss-fuzz) project - list. + [fuzzing](https://owasp.org/www-community/Fuzzing). The current implementation + check if the repository name is included in the [OSS-Fuzz](https://github.com/google/oss-fuzz) project + list or if [ClusterFuzzLite](https://google.github.io/clusterfuzzlite/) is enabled. Fuzzing, or fuzz testing, is the practice of feeding unexpected or random data into a program to expose bugs. Regular fuzzing is important to detect