From 7f59bb7c024c817bfd0f76ae021f5a282a47539f Mon Sep 17 00:00:00 2001
From: penguin <penguin@epenguin.net>
Date: Sat, 13 Dec 2025 22:29:36 -0600
Subject: [PATCH] ci: add fuzz job

ci: fuzz: add timeout

ci: fuzz: add fuzzer timeout
---
 .gitea/workflows/gentoo-utils.yml | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/.gitea/workflows/gentoo-utils.yml b/.gitea/workflows/gentoo-utils.yml
index 836c150..e27402a 100644
--- a/.gitea/workflows/gentoo-utils.yml
+++ b/.gitea/workflows/gentoo-utils.yml
@@ -125,6 +125,36 @@ jobs:
           meson compile -C build
           ninja test -C build
 
+  fuzz:
+    runs-on: brutalisk
+    env:
+      CC: 'clang'
+      CXX: 'clang++'
+      FUZZER_TIMEOUT_S: 300
+    needs: [build-oci-image, build]
+    container:
+      image: ${{ vars.REGISTRY_URL }}/${{ gitea.repository }}:${{ needs.build-oci-image.outputs.image_tag }}
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v5
+
+      # FIXME: Get rid of this step when portage has fixes merged?
+      # needed because portage has fixes upstream we need that arent stable yet
+      - name: Checkout tip of portage
+        run: |
+          git clone https://github.com/gentoo/portage.git
+          cd portage
+          python -m venv .venv && ./.venv/bin/pip install -e .
+          source ./.venv/bin/activate
+          which emerge
+
+      - name: build and fuzz
+        run: |
+          which emerge
+          meson setup -Dfuzz=enabled -Dtests=enabled -Dbuildtype=debugoptimized build
+          meson compile atom_parser_fuzzer:alias -C build
+          timeout 10m ./scripts/fuzz.sh
+
   check-format:
     runs-on: brutalisk
     needs: [build-oci-image]