Consider fuzzing

[mihaimaruseac]

Consider fuzzing the library and adding to OSSFuzz (see google/oss-fuzz#12368 for sigstore-python)

[AdamKorcz]

I might have bandwidth to do the initial integration. Do you have any initial entrypoints in mind for the first round of fuzzing?

[mihaimaruseac]

Not yet, we're still defining the API (#172 / #175 ). But when we get closer to a release we should be ready for this. Sorry for the delay and thank you for taking this up

[mihaimaruseac]

Adding this to v1.1 milestone, to pick up after the v1 release. Too late for v1, sadly.

[SequeI]

@mihaimaruseac Could I take a jab at this, or is it too late? (I don't want to mess up your funding request)

[mihaimaruseac]

We'll need to create the vendor documentation for the OpenSSF funding request. I should do this week or the next, but need to see how this works, first. I know @AdamKorcz suggested taking this up in the past and we could use their help, but I first need to see what the processes are.

[SequeI]

Sounds good, I'd be happy to help out in any way I can, feel free to @ me if I can assist with anything :)

[AdamKorcz]

We are still interested in and available for this.

[mihaimaruseac]

I think this is now being done? Thank you @AdamKorcz!

[AdamKorcz]

Yep, this can be closed.