II.
Workflow overview
Reference · liveworkflow:fuzzing-campaign
Fuzzing Campaign overview
Plans and executes automated fuzz testing campaigns against critical code paths -- selecting fuzzing engines (AFL++, libFuzzer, Jazzer), writing harnesses for target functions, seeding initial corpora, running continuous fuzzing for a defined window, triaging unique crashes by exploitability, reporting confirmed vulnerabilities with reproducer inputs, and tracking regression via corpus integration into CI. Excludes fix implementation.
Attributes
displayName
Fuzzing Campaign
workflowKind
security
triggerType
scheduled
typicalCadence
per-release
complexity
single-team
description
Plans and executes automated fuzz testing campaigns against critical code
paths -- selecting fuzzing engines (AFL++, libFuzzer, Jazzer), writing
harnesses for target functions, seeding initial corpora, running continuous
fuzzing for a defined window, triaging unique crashes by exploitability,
reporting confirmed vulnerabilities with reproducer inputs, and tracking
regression via corpus integration into CI. Excludes fix implementation.
Outgoing edges
applies_to_domain2
- domain:cybersecurity·DomainCybersecurity
- domain:software-engineering·DomainSoftware Engineering
involves_role3
- role:security-reviewer·RoleSecurity Reviewer
- role:test-writer·RoleTest Writer
- role:debugger·RoleDebugger
performed_by_org_unit2
- org-unit:security-team·OrgUnitSecurity Team
- org-unit:quality-engineering·OrgUnitQuality Engineering
requires_skill_area2
- skill-area:fuzz-testing·SkillAreaFuzz Testing
- skill-area:sast·SkillAreaStatic Application Security Testing (SAST)
triggers_responsibility2
- responsibility:run-security-scans·ResponsibilityRun security scans
- responsibility:triage-incoming-issues·ResponsibilityTriage incoming issues
Incoming edges
None.