ClusterFuzzLite integration and GitHub Actions

[hickford]

ClusterFuzzLite is a continuous fuzzing solution that runs as part of Continuous Integration (CI) workflows to find vulnerabilities faster than ever before. With just a few lines of code, GitHub users can integrate ClusterFuzzLite into their workflow and fuzz pull requests to catch bugs before they are committed.

Following https://google.github.io/clusterfuzzlite/build-integration/ with bits of https://google.github.io/oss-fuzz/getting-started/new-project-guide/go-lang/#native-go-fuzzing-support

Tested:

git clone https://github.com/google/oss-fuzz.git
export PATH_TO_PROJECT=$HOME/merkle
python3 infra/helper.py build_image --external $PATH_TO_PROJECT
sudo python3 infra/helper.py build_fuzzers --external $PATH_TO_PROJECT
sudo python3 infra/helper.py run_fuzzer --external $PATH_TO_PROJECT FuzzRangeNodes

Setup for OSS-Fuzz (runs on Google infrastructure rather than GitHub Actions) would be similar.

[codecov-commenter]

Codecov Report

Merging #37 (2642a14) into main (ca422cf) will not change coverage.
The diff coverage is n/a.

❗ Current head 2642a14 differs from pull request most recent head 9eed608. Consider uploading reports for the commit 9eed608 to get more accurate results

@@           Coverage Diff           @@
##             main      #37   +/-   ##
=======================================
  Coverage   88.93%   88.93%           
=======================================
  Files           7        7           
  Lines         497      497           
=======================================
  Hits          442      442           
  Misses         50       50           
  Partials        5        5           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ca422cf...9eed608. Read the comment docs.