add ClusterFuzzLite with go native fuzzing

.clusterfuzzlite/Dockerfile

@@ -0,0 +1,4 @@
+FROM gcr.io/oss-fuzz-base/base-builder-go
+COPY . $SRC/spicedb
+WORKDIR $SRC/spicedb
+COPY ./.clusterfuzzlite/build.sh $SRC/

.clusterfuzzlite/build.sh

@@ -0,0 +1,10 @@
+#!/bin/bash -eu
+
+go install github.com/AdamKorcz/go-118-fuzz-build@latest
+go get github.com/AdamKorcz/go-118-fuzz-build/utils
+
+# Workaround https://github.com/AdamKorcz/go-118-fuzz-build/issues/2
+mv $SRC/spicedb/pkg/schemadsl/parser/parser_test.go $SRC/spicedb/pkg/schemadsl/parser/parser_test_fuzz.go
+
+compile_native_go_fuzzer github.com/authzed/spicedb/pkg/schemadsl/parser FuzzParser FuzzParser
+

.clusterfuzzlite/project.yaml

@@ -0,0 +1,2 @@
+---
+language: "go"

.github/workflows/fuzzing.yaml

@@ -0,0 +1,39 @@
+---
+name: "ClusterFuzzLite PR fuzzing"
+on:
+  push:
+    branches:
+      - "!dependabot/*"
+      - "main"
+  pull_request:
+    branches: ["*"]
+permissions: "read-all"
+jobs:
+  fuzz:
+    runs-on: "ubuntu-latest"
+    concurrency:
+      group: "${{ github.workflow }}-${{ matrix.sanitizer }}-${{ github.ref }}"
+      cancel-in-progress: true
+    strategy:
+      fail-fast: false
+      matrix:
+        sanitizer:
+          - "address"
+          - "undefined"
+          - "memory"
+    steps:
+      - name: "Build Fuzzers (${{ matrix.sanitizer }})"
+        id: "build"
+        uses: "google/clusterfuzzlite/actions/build_fuzzers@v1"
+        with:
+          language: "go"
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+          sanitizer: "${{ matrix.sanitizer }}"
+      - name: "Run Fuzzers (${{ matrix.sanitizer }})"
+        id: "run"
+        uses: "google/clusterfuzzlite/actions/run_fuzzers@v1"
+        with:
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+          fuzz-seconds: 30
+          mode: "code-change"
+          sanitizer: "${{ matrix.sanitizer }}"

pkg/schemadsl/parser/parser_test.go

@@ -170,3 +170,9 @@ func getParseTree(currentNode *testNode, indentation int) string {
 
 	return parseTree
 }
+
+func FuzzParser(f *testing.F) {
+	f.Fuzz(func(t *testing.T, path, in string) {
+		_ = Parse(createAstNode, input.Source(path), in)
+	})
+}