Android rebase

.codecov.yml

@@ -0,0 +1,3 @@
+codecov:
+  ci:
+    - community-tc.services.mozilla.com

.github/scripts/start-worker.sh

@@ -0,0 +1,58 @@
+#!/bin/sh -e
+
+[ -z "$TASKCLUSTER_ACCESS_TOKEN" ] && echo "Missing TASKCLUSTER_ACCESS_TOKEN" >&2 && exit 2
+[ -z "$TC_WORKER_ID" ] && echo "Missing TC_WORKER_ID" >&2 && exit 2
+
+set -x
+
+TC_VERSION=v44.4.0
+TC_PROJECT=fuzzing
+TC_WORKER_TYPE=ci-osx
+TC_IDLE_TIMEOUT=300
+
+TASKCLUSTER_ROOT_URL="https://community-tc.services.mozilla.com"
+TASKCLUSTER_CLIENT_ID="project/$TC_PROJECT/worker-$TC_WORKER_TYPE-gh"
+
+set +x
+cat > worker.config <<EOF
+{
+  "accessToken": "$TASKCLUSTER_ACCESS_TOKEN",
+  "clientId": "$TASKCLUSTER_CLIENT_ID",
+  "disableReboots": true,
+  "ed25519SigningKeyLocation": "worker.key",
+  "idleTimeoutSecs": $TC_IDLE_TIMEOUT,
+  "livelogExecutable": "$PWD/livelog",
+  "provisionerId": "proj-$TC_PROJECT",
+  "publicIP": "127.0.0.1",
+  "requiredDiskSpaceMegabytes": 512,
+  "rootURL": "$TASKCLUSTER_ROOT_URL",
+  "sentryProject": "generic-worker",
+  "taskclusterProxyExecutable": "$PWD/taskcluster-proxy",
+  "taskclusterProxyPort": 8080,
+  "tasksDir": "tasks",
+  "workerGroup": "proj-$TC_PROJECT",
+  "workerId": "$TC_WORKER_ID",
+  "workerType": "$TC_WORKER_TYPE",
+  "wstAudience": "communitytc",
+  "wstServerURL": "https://community-websocktunnel.services.mozilla.com"
+}
+EOF
+set -x
+unset TASKCLUSTER_ACCESS_TOKEN
+
+curl -sSL "https://github.com/taskcluster/taskcluster/releases/download/$TC_VERSION/generic-worker-simple-darwin-amd64" -o generic-worker
+curl -sSL "https://github.com/taskcluster/taskcluster/releases/download/$TC_VERSION/livelog-darwin-amd64" -o livelog
+curl -sSL "https://github.com/taskcluster/taskcluster/releases/download/$TC_VERSION/taskcluster-proxy-darwin-amd64" -o taskcluster-proxy
+chmod +x generic-worker livelog taskcluster-proxy
+
+./generic-worker new-ed25519-keypair --file worker.key
+mkdir tasks
+set +e
+./generic-worker run --config worker.config
+case $? in
+0|68)
+  ;;
+*)
+  exit $?
+  ;;
+esac

.github/workflows/taskcluster-pr.yml

@@ -0,0 +1,11 @@
+name: taskcluster PR worker
+on: [pull_request]
+jobs:
+  osx-tc-worker-pr:
+    runs-on: macos-latest
+    env:
+      TASKCLUSTER_ACCESS_TOKEN: ${{ secrets.TASKCLUSTER_ACCESS_TOKEN }}
+      TC_WORKER_ID: "gh-grizzly-pr-${{ github.run_id }}-${{ github.run_attempt }}"
+    steps:
+      - uses: actions/checkout@v2
+      - run: .github/scripts/start-worker.sh

.github/workflows/taskcluster-push.yml

@@ -0,0 +1,11 @@
+name: taskcluster push worker
+on: [push]
+jobs:
+  osx-tc-worker-push:
+    runs-on: macos-latest
+    env:
+      TASKCLUSTER_ACCESS_TOKEN: ${{ secrets.TASKCLUSTER_ACCESS_TOKEN }}
+      TC_WORKER_ID: "gh-grizzly-push-${{ github.run_id }}-${{ github.run_attempt }}"
+    steps:
+      - uses: actions/checkout@v2
+      - run: .github/scripts/start-worker.sh

.github/workflows/taskcluster-release.yml

@@ -0,0 +1,11 @@
+name: taskcluster release worker
+on: [release]
+jobs:
+  osx-tc-worker-release:
+    runs-on: macos-latest
+    env:
+      TASKCLUSTER_ACCESS_TOKEN: ${{ secrets.TASKCLUSTER_ACCESS_TOKEN }}
+      TC_WORKER_ID: "gh-grizzly-release-${{ github.run_id }}-${{ github.run_attempt }}"
+    steps:
+      - uses: actions/checkout@v2
+      - run: .github/scripts/start-worker.sh

.pre-commit-config.yaml

@@ -0,0 +1,60 @@
+repos:
+  - repo: https://github.com/pycqa/isort
+    rev: 5.10.1
+    hooks:
+      - id: isort
+  - repo: https://github.com/asottile/yesqa
+    rev: v1.3.0
+    hooks:
+      - id: yesqa
+  - repo: https://github.com/ambv/black
+    rev: 22.6.0
+    hooks:
+      - id: black
+  - repo: https://gitlab.com/pycqa/flake8
+    rev: 4.0.1
+    hooks:
+      - id: flake8
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v4.1.0
+    hooks:
+      - id: check-ast
+      - id: check-docstring-first
+      - id: check-executables-have-shebangs
+      - id: check-merge-conflict
+      - id: check-symlinks
+      - id: debug-statements
+      - id: trailing-whitespace
+      - id: check-yaml
+      - id: mixed-line-ending
+      - id: name-tests-test
+        args: ['--django']
+      - id: check-json
+      - id: requirements-txt-fixer
+  - repo: https://github.com/codespell-project/codespell
+    rev: v2.1.0
+    hooks:
+      - id: codespell
+        exclude_types: [json]
+  - repo: https://github.com/marco-c/taskcluster_yml_validator
+    rev: v0.0.7
+    hooks:
+      - id: taskcluster_yml
+  - repo: https://github.com/MozillaSecurity/orion
+    rev: v0.0.4
+    hooks:
+      - id: orion_ci
+  - repo: meta
+    hooks:
+      - id: check-useless-excludes
+  - repo: local
+    hooks:
+      - id: pylint
+        name: pylint
+        entry: tox -e pylint --
+        language: system
+        require_serial: true
+        types: [python]
+
+default_language_version:
+  python: python3

.taskcluster.yml

@@ -0,0 +1,134 @@
+version: 1
+policy:
+  pullRequests: collaborators
+tasks:
+  $let:
+    user: ${event.sender.login}
+
+    fetch_rev:
+      $if: 'tasks_for == "github-pull-request"'
+      then: ${event.pull_request.head.sha}
+      else:
+        $if: 'tasks_for == "github-push"'
+        then: ${event.after}
+        else: ${event.release.tag_name}
+
+    fetch_ref:
+      $if: 'tasks_for == "github-pull-request"'
+      then: ${event.pull_request.head.sha}
+      else:
+        $if: 'tasks_for == "github-push"'
+        then: ${event.after}
+        else: "refs/tags/${event.release.tag_name}:refs/tags/${event.release.tag_name}"
+
+    http_repo:
+      $if: 'tasks_for == "github-pull-request"'
+      then: ${event.pull_request.base.repo.clone_url}
+      else: ${event.repository.clone_url}
+
+    codecov_secret:
+      codecov-grizzly
+
+    pypi_secret:
+      pypi-grizzly
+
+    project_name:
+      Grizzly
+
+    matrix:
+      language: python
+      secrets:
+        - type: env
+          secret: project/fuzzing/codecov-grizzly
+          name: CODECOV_TOKEN
+          key: token
+      script:
+        - bash
+        - '-xec'
+        - tox; tox -e codecov
+      jobs:
+        include:
+          - name: tests python 3.6
+            version: "3.6"
+            env:
+              TOXENV: py36,lint
+          - name: tests python 3.7
+            version: "3.7"
+            env:
+              TOXENV: py37,lint
+          - name: tests python 3.8
+            version: "3.8"
+            env:
+              TOXENV: py38,lint
+          - name: test python 3.8 (windows)
+            version: "3.8"
+            platform: windows
+            env:
+              TOXENV: py38
+          - name: tests python 3.9
+            version: "3.9"
+            env:
+              TOXENV: py39,lint
+          - name: tests python 3.9 (macos)
+            version: "3.9"
+            platform: macos
+            env:
+              TOXENV: py39
+          - name: tests python 3.10
+            version: "3.10"
+            env:
+              TOXENV: py310,lint
+          - name: PyPI upload
+            version: "3.8"
+            env:
+              TOXENV: pypi
+            script:
+              - tox
+            when:
+              release: true
+              all_passed: true
+            secrets:
+              - type: env
+                secret: project/fuzzing/pypi-grizzly
+                name: TWINE_USERNAME
+                key: username
+              - type: env
+                secret: project/fuzzing/pypi-grizzly
+                name: TWINE_PASSWORD
+                key: password
+
+  in:
+    $if: 'tasks_for in ["github-push", "github-release"] || (tasks_for == "github-pull-request" && event["action"] in ["opened", "reopened", "synchronize"])'
+    then:
+      - created: {$fromNow: ''}
+        deadline: {$fromNow: '1 hour'}
+        provisionerId: proj-fuzzing
+        workerType: ci
+        payload:
+          features:
+            taskclusterProxy: true
+          maxRunTime: 3600
+          image:
+            type: indexed-image
+            path: public/orion-decision.tar.zst
+            namespace: project.fuzzing.orion.orion-decision.master
+          env:
+            PROJECT_NAME: ${project_name}
+            CI_MATRIX: {$json: {$eval: matrix}}
+            GITHUB_EVENT: {$json: {$eval: event}}
+            GITHUB_ACTION: ${tasks_for}
+            TASKCLUSTER_NOW: ${now}
+          command:
+            - ci-decision
+            - -v
+        scopes:
+          - queue:create-task:highest:proj-fuzzing/ci
+          - queue:create-task:highest:proj-fuzzing/ci-*
+          - queue:scheduler-id:taskcluster-github
+          - secrets:get:project/fuzzing/codecov-grizzly
+          - secrets:get:project/fuzzing/pypi-grizzly
+        metadata:
+          name: ${project_name} CI decision
+          description: Schedule CI tasks for ${project_name}
+          owner: [email protected]
+          source: https://github.com/MozillaSecurity/grizzly

CODE_OF_CONDUCT.md

@@ -1,8 +1,8 @@
 # Community Participation Guidelines
 
-This repository is governed by Mozilla's code of conduct and etiquette guidelines. 
+This repository is governed by Mozilla's code of conduct and etiquette guidelines.
 For more details, please read the
-[Mozilla Community Participation Guidelines](https://www.mozilla.org/about/governance/policies/participation/). 
+[Mozilla Community Participation Guidelines](https://www.mozilla.org/about/governance/policies/participation/).
 
 ## How to Report
 For more information on how to report violations of the Community Participation Guidelines, please read our '[How to Report](https://www.mozilla.org/about/governance/policies/participation/reporting/)' page.

MANIFEST.in

@@ -0,0 +1 @@
+include grizzly/common/harness.html