diff --git a/checks/fuzzing.go b/checks/fuzzing.go index 2387a40e455..2cf08c5c6bc 100644 --- a/checks/fuzzing.go +++ b/checks/fuzzing.go @@ -86,5 +86,5 @@ func Fuzzing(c *checker.CheckRequest) checker.CheckResult { "project is fuzzed in OSS-Fuzz") } - return checker.CreateMinScoreResult(CheckFuzzing, "project is not fuzzed") + return checker.CreateInconclusiveResult(CheckFuzzing, "could not determine if project is fuzzed") } diff --git a/docs/checks/internal/checks.yaml b/docs/checks/internal/checks.yaml index 37310f4daf0..df4c9d6d1ce 100644 --- a/docs/checks/internal/checks.yaml +++ b/docs/checks/internal/checks.yaml @@ -374,9 +374,9 @@ checks: Risk: `Medium` (possible vulnerabilities in code) This check tries to determine if the project uses - [fuzzing](https://owasp.org/www-community/Fuzzing) by checking if the repository - name is included in the [OSS-Fuzz](https://github.com/google/oss-fuzz) project - list. + [fuzzing](https://owasp.org/www-community/Fuzzing). The current implementation + check if the repository name is included in the [OSS-Fuzz](https://github.com/google/oss-fuzz) project + list or if [ClusterFuzzLite](https://google.github.io/clusterfuzzlite/) is enabled. Fuzzing, or fuzz testing, is the practice of feeding unexpected or random data into a program to expose bugs. Regular fuzzing is important to detect