Skip to content

docs(security): record OSS-Fuzz upstream rejection in OSS_FUZZ.md#463

Open
CryptoJones wants to merge 1 commit into
masterfrom
fix/450-ossfuzz-doc-rejection
Open

docs(security): record OSS-Fuzz upstream rejection in OSS_FUZZ.md#463
CryptoJones wants to merge 1 commit into
masterfrom
fix/450-ossfuzz-doc-rejection

Conversation

@CryptoJones

Copy link
Copy Markdown
Owner

Follow-up to closing #450.

docs/security/OSS_FUZZ.md still read as a forward-looking plan to stand up a Google-hosted OSS-Fuzz project, even though google/oss-fuzz#15545 was declined on 2026-05-26 (Google collaborator DavidKorczynski: forks aren't a good OSS-Fuzz match) and the .github/oss-fuzz/ wrapper was removed in #84. The other project-state docs (CHANGELOG, SprintPlanning) were reconciled in #83; this doc was missed.

Changes (docs-only):

  • Status banner at the top quoting the rejection and re-scoping to in-tree fuzzing.
  • Fixed the dead .github/oss-fuzz/ scaffold reference (those files were removed in chore(rec-13/14): remove dead .github/oss-fuzz/ wrapper #84; preserved in git history).
  • Reframed the submission checklist as historical — build/wrapper items completed and all of #15545's automated checks passed; the "first successful build on OSS-Fuzz infra" item is now marked won't-happen.
  • Reframed the maintenance commitment from "keep the OSS-Fuzz build green" to keeping the in-tree harnesses building (they bit-rotted once post-rejection, repaired in cad859a).

🤖 Generated with Claude Code

OSS_FUZZ.md still read as a forward-looking integration plan even though
google/oss-fuzz#15545 was declined 2026-05-26 (Google does not accept
forks) and the .github/oss-fuzz/ wrapper was removed in #84. The other
project-state docs were reconciled in #83; this one was missed.

- Add a status banner quoting the rejection and re-scoping to in-tree
  fuzzing.
- Fix the dead .github/oss-fuzz/ scaffold reference (removed in #84).
- Reframe the submission checklist as historical: build/wrapper items
  done, the upstream-build item marked won't-happen.
- Reframe the maintenance commitment from "keep the OSS-Fuzz build green"
  to keeping the in-tree harnesses building (they bit-rotted once,
  repaired in cad859a).

Docs-only. Follow-up to closing #450.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@github-actions github-actions Bot added the lane:framework Default lane: anything else. label Jun 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

lane:framework Default lane: anything else.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant