# ClusterFuzzLite | Simple Continuous Fuzzing That Runs In CI

**URL:** <https://onehack.st/t/clusterfuzzlite-simple-continuous-fuzzing-that-runs-in-ci/212468>\
**Category:** Tools & Scripts\
**Tags:** tools, hacking, tips-tricks\
**Created:** [January 18, 2022, 2:49pm UTC](https://onehack.st/t/clusterfuzzlite-simple-continuous-fuzzing-that-runs-in-ci/212468 "2022-01-18T14:49:52Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![NoBody](https://onehack.st/user_avatar/onehack.st/nobody/32/163880_2.png) [@NoBody](https://onehack.st/u/NoBody)\
**Post date:** [January 18, 2022, 2:49pm UTC](https://onehack.st/t/clusterfuzzlite-simple-continuous-fuzzing-that-runs-in-ci/212468/1 "2022-01-18T14:49:52Z")

</div>

[![demo](https://camo.githubusercontent.com/457e36075e5b65e5cc4d0391c8d3ce6871410a41d5f3e808410dd563860fc88c/68747470733a2f2f73746f726167652e676f6f676c65617069732e636f6d2f636c757374657266757a7a6c6974652d7075626c69632f696d616765732f64656d6f2e676966)](https://camo.githubusercontent.com/457e36075e5b65e5cc4d0391c8d3ce6871410a41d5f3e808410dd563860fc88c/68747470733a2f2f73746f726167652e676f6f676c65617069732e636f6d2f636c757374657266757a7a6c6974652d7075626c69632f696d616765732f64656d6f2e676966)

ClusterFuzzLite is a continuous [fuzzing](https://en.wikipedia.org/wiki/Fuzzing) solution that runs as part of [Continuous Integration (CI)](https://en.wikipedia.org/wiki/Continuous_integration) workflows to find vulnerabilities faster than ever before. With just a few lines of code, GitHub users can integrate ClusterFuzzLite into their workflow and fuzz pull requests to catch bugs before they are committed.

ClusterFuzzLite is based on [ClusterFuzz](https://google.github.io/clusterfuzz/).

## Features

- Quick code change (pull request) fuzzing to find bugs before they land
- Downloads of crashing testcases
- Continuous longer running fuzzing (batch fuzzing) to asynchronously find deeper bugs missed during code change fuzzing and build a corpus for use in code change fuzzing
- Coverage reports showing which parts of your code are fuzzed
- Modular functionality, so you can decide which features you want to use

[![demo](https://camo.githubusercontent.com/457e36075e5b65e5cc4d0391c8d3ce6871410a41d5f3e808410dd563860fc88c/68747470733a2f2f73746f726167652e676f6f676c65617069732e636f6d2f636c757374657266757a7a6c6974652d7075626c69632f696d616765732f64656d6f2e676966)](https://camo.githubusercontent.com/457e36075e5b65e5cc4d0391c8d3ce6871410a41d5f3e808410dd563860fc88c/68747470733a2f2f73746f726167652e676f6f676c65617069732e636f6d2f636c757374657266757a7a6c6974652d7075626c69632f696d616765732f64656d6f2e676966)

## Supported Languages

- C
- C++
- Java (and other JVM-based languages)
- Go
- Python
- Rust
- Swift

## Supported CI Systems

- GitHub Actions
- Google Cloud Build
- Prow
- Support for more CI systems is in-progess, and extending support to other CI systems is easy

## Documentation

Read our [detailed documentation](https://google.github.io/clusterfuzzlite) to learn how to use ClusterFuzzLite.

## Staying in touch

Join our [mailing list](https://groups.google.com/g/clusterfuzzlite-users) for announcements and discussions.

If you use ClusterFuzzLite, please fill out [this form](https://docs.google.com/forms/d/e/1FAIpQLSdAKB03YM4HjMwNe1K4T6Yr16OE4lCMj-VzThuUOrZUc3ytWw/viewform?usp=sf_link) so we know who is using it. This gives us an idea of the impact of ClusterFuzzLite and allows us to justify future work.

Feel free to [file an issue](https://github.com/google/clusterfuzzlite/issues/new) if you experience any trouble or have feature requests.

## GitHub:

[https://github.com/google/clusterfuzzlite](https://github.com/google/clusterfuzzlite)