Skip to main content

Telemetry in CI Fuzz

CI Fuzz collects anonymous data to provide useful information about how users interact with the product. The data is used to improve the product and to make decisions about future features and improvements.

What data is collected?​

  • CI Fuzz version: The version of CI Fuzz you're using. For example: 1.2.3.
  • CI Fuzz command: The command you ran in CI Fuzz. For example: run.
  • CI Fuzz exit code: Exit status code of the command you ran in CI Fuzz. For example: 0 for success, 1 for failure.
  • OS version: OS and CPU architecture you are using. For example: windows/amd64.
  • CI Fuzz command duration: How long the CI Fuzz command took to run. For example: 1500 [miliseconds].
  • CI/CD: A true/false value indicating whether CI Fuzz ran in a CI/CD environment. For example: true when running in Jenkins pipeline.
  • Build system: The build system tested. For example: maven.
  • Flags: The flags but not their values used in the command. For example: [json, seed-corpus, verbose] from cifuzz run --json --seed-corpus /my-corpus -v.
  • Findings: A true/false value indicating whether CI Fuzz created new Findings but no information about it. For example: true.

CI Fuzz sends data via HTTPS to a telemetry endpoint on code-intelligence.com, which is then stored in an Azure account and used for product analytics.

Opting out​

CI Fuzz collects telemetry data by default. If it can't establish a secure connection to code-intelligence.com, it doesn't collect any data. Set the CIFUZZ_TELEMETRY environment variable to false to opt-out of this behavior.

CIFUZZ_TELEMERY=false cifuzz run

You can also opt out by updating a configuration file cifuzz/config.yaml in your user configuration directory. To turn off telemetry collection, the file should contain the following:

telemetry: false