name: Go Fuzz Tests

on:
    schedule:
        - cron: "0 2 * * *" # Nightly at 2am UTC
    workflow_dispatch:

env:
    GIT_SSL_NO_VERIFY: "true"
    NODE_TLS_REJECT_UNAUTHORIZED: "0"

jobs:
    fuzz:
        runs-on: ubuntu-latest
        timeout-minutes: 15

        defaults:
            run:
                working-directory: veza-backend-api

        steps:
            - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

            - name: Set up Go
              uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
              with:
                  go-version: "1.25"
                  cache: true

            - name: Download deps
              run: go mod download

            - name: Run fuzz tests
              run: go test -fuzz=Fuzz -fuzztime=60s ./internal/handlers/...

            - name: Upload fuzz corpus
              if: always()
              uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
              with:
                  name: fuzz-corpus
                  path: veza-backend-api/testdata/fuzz/
                  retention-days: 30