fix(audit): Add Fuzzer for cbor serialization in Operator

[PatStiles]

Adds a fuzzer for cbor serialization within the operator, closes#902 .

To test on :

macOS

make operator_verification_data_fuzz_macos

Linux

operator_verification_data_fuzz_linux

[MauroToscano]

I'm getting no Go files in ../workspace/aligned_layer/operator. We also need to document this somewhere

[PatStiles]

Added make targets for fuzzing.

[uri-99]

Fuzzer is returning an error:

This seems to be when Decode() is called with the data parameter: []byte("\xa7_[\x00\x00\x10\x000000")

[uri-99]

Was @Oppen debugging the panic on the Decode function? Any news?

[uri-99]

Note: same crash happens on Linux

[IAvecilla]

After some debugging and research, we decided to try changing the CBOR library we were using. That change seems to have fixed the issue.

I’ve opened PR #1110, which updates the library to the one proposed by @Oppen in #1093 .

[MauroToscano]

If the data is invalid unmarshall will fatal. Just check the decoding works and doesn't panics.

We can have another one that starts from a valid piece of data

[PatStiles]

If the data is invalid unmarshall will fatal. Just check the decoding works and doesn't panics.

We can have another one that starts from a valid piece of data

I split the fuzzer into marshall and unmarshall.

[MauroToscano]

Superseeded by: #1110