A quick update: OSS-Fuzz has gained coverage support for Java. You can access the latest apache-commons report at https://oss-fuzz.com/coverage-report/job/libfuzzer_asan_apache-commons/latest and check how well the fuzzer is doing.
Fabian On Thu, Apr 22, 2021, 17:44 Fabian Meumertzheim < meumertzh...@code-intelligence.com> wrote: > On Thu, Apr 22, 2021 at 5:27 PM Peter Lee <peter...@apache.org> wrote: > > > I just created a PR in Compress > > https://github.com/apache/commons-compress/pull/189 > > Thanks! > > > IIUC I could create a PR github.com/google/oss-fuzz to include my > google account in auto_ccs, and I should ask the primary contact, who is > Stefen, to sign off my PR. Am I right about this? > > Precisely, just mention @bodewig in the PR description. There is no > formalized procedure, but this should work. > > Best, > Fabian >