.github/workflows/fuzz.yml

name: Fuzz

on:
  schedule:
    - cron: '0 6 * * 1'  # weekly Monday 6am UTC
  workflow_dispatch:

permissions:
  contents: read

jobs:
  fuzz:
    name: Fuzz (fast-check)
    runs-on: ubuntu-latest
    timeout-minutes: 30
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          persist-credentials: false
      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v4.4.0
        with:
          node-version: '20'
      - run: |
          set -euo pipefail
          if [ -f "package.json" ]; then
            npm ci
            if npm pkg get scripts.test:fuzz | grep -qv null; then
              npm run test:fuzz
            else
              echo "No fuzz tests configured yet (advisory workflow)"
            fi
          else
            echo "No package.json found"
          fi