ci: add ClusterFuzzLite + SLSA provenance file in releases#28

Merged

cohenrobinson merged 7 commits into

mainfrom

chore/scorecard-fuzzing-and-provenance

May 10, 2026

Commits on May 10, 2026

ci: add ClusterFuzzLite + SLSA provenance file in releases

cohenrobinson
and
claude
committed
ci: fix ClusterFuzzLite action SHA

cohenrobinson
and
claude
committed
ci: drop bogus --add-binary flag from cflite build

cohenrobinson
and
claude
committed
fuzz: catch csv.Error and OverflowError in harness allowlists

cohenrobinson
and
claude
committed
fuzz: catch Exception broadly, hunt for hangs not crashes

cohenrobinson
and
claude
committed
ci: shrink per-PR cflite to a 60s address-sanitizer smoke

cohenrobinson
and
claude
committed
ci: tighten cflite_pr triggers and budget

cohenrobinson
and
claude
committed