domains / families / security / implementing-fuzz-testing-in-cicd-with-aflplusplus

implementing-fuzz-testing-in-cicd-with-aflplusplus

separate

Integrates AFL++ coverage-guided fuzzing into CI/CD pipelines, covering harness construction, AFL++/AddressSanitizer/CmpLog instrumentation builds, and persistent-mode fuzzing to discover memory-corruption and input-handling vulnerabilities in C/C++ code. Use when adding automated fuzz testing to a build pipeline or hunting for memory-safety bugs in native/compiled applications.

When to use

• When deploying or configuring implementing fuzz testing in cicd with aflplusplus capabilities in your environment
• When establishing security controls aligned to compliance requirements
• When building or improving security architecture for this domain
• When conducting security assessments that require this implementation

When not to use

• Windows-based CI runners
• non-C/C++ code

Skill page

Source