From 1aa741f4b8ee505469d42383e2e0494cac700b31 Mon Sep 17 00:00:00 2001
From: can olgun <canolgun@gmail.com>
Date: Fri, 12 Jun 2026 11:24:23 +0300
Subject: [PATCH] Add CIFuzz workflow for OSS-Fuzz continuous fuzzing

---
 .github/workflows/cifuzz.yml | 38 ++++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 .github/workflows/cifuzz.yml

diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml
new file mode 100644
index 00000000..d25dbf3d
--- /dev/null
+++ b/.github/workflows/cifuzz.yml
@@ -0,0 +1,38 @@
+name: CIFuzz
+on:
+  pull_request:
+    paths:
+      - '**'
+  push:
+    branches: [main, master]
+permissions:
+  contents: read
+jobs:
+  fuzzing:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        sanitizer: [address]
+    steps:
+    - name: Build Fuzzers (${{ matrix.sanitizer }})
+      id: build
+      uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master
+      with:
+        oss-fuzz-project-name: 'gin'
+        language: go
+        sanitizer: ${{ matrix.sanitizer }}
+    - name: Run Fuzzers (${{ matrix.sanitizer }})
+      uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master
+      with:
+        oss-fuzz-project-name: 'gin'
+        language: go
+        fuzz-seconds: 300
+        sanitizer: ${{ matrix.sanitizer }}
+        output-sarif: true
+    - name: Upload Sarif
+      if: always() && steps.build.outcome == 'success'
+      uses: github/codeql-action/upload-sarif@v3
+      with:
+        sarif_file: cifuzz-sarif/results.sarif
+        category: fuzz-${{ matrix.sanitizer }}