[FEAT] - Readme and Dependabot Mods and More!

[mrz1836]

This pull request adds comprehensive fuzz testing for configuration and alert message parsing, improves input validation, and updates some dependencies and documentation. The most significant changes are the addition of fuzz tests to increase code robustness, stricter input validation for alert messages, and minor updates to container images and documentation.

Testing and Robustness Improvements:

• Added extensive fuzz tests for configuration parsing in app/config/load_fuzz_test.go, covering bitcoin.conf line splitting, key-value parsing, and host:port parsing to ensure the code handles a wide range of valid and invalid inputs without panicking.
• Added fuzz tests for alert message parsing and serialization in app/models/alert_message_fuzz_test.go, ensuring NewAlertFromBytes, ReadRaw, and serialization logic are robust against arbitrary input.

Input Validation:

• Increased the minimum required length for alert messages in app/models/alert_message.go to 20 bytes, clarifying the structure and preventing parsing of too-short messages.
• Added a check in app/models/alert_message_invalidate_block.go to ensure at least 32 bytes are present for block hash parsing, improving error reporting for short inputs.
• Fixed the return statement in the splitFunc to always return explicit values, improving clarity and correctness.

Container and Dependency Updates:

• Updated the base images in the Dockerfile to use specific digests for both the builder and runtime images, improving build reproducibility and security. [1] [2]

Documentation Updates:

• Updated the project name in the installation instructions and changed the license badge in README.md for clarity and branding. [1] [2]
• Minor cleanup in .github/dependabot.yml.

[Copilot]

Pull Request Overview

This PR adds comprehensive fuzz testing coverage for alert message parsing, P2P sync message handling, and configuration file parsing. It also includes minor code quality improvements by making return statements explicit and updating documentation.

• Adds fuzz tests for P2P sync message serialization/deserialization
• Adds fuzz tests for all alert message types (ban/unban peer, freeze/unfreeze UTXO, confiscate transaction, invalidate block, set keys, informational)
• Adds fuzz tests for bitcoin.conf configuration file parsing
• Adds input validation for invalidate block alert parsing
• Updates alert message minimum length validation from 16 to 20 bytes with clarifying comment
• Makes implicit return statements explicit in several functions
• Updates Docker base images to use SHA256 digests for reproducibility
• Updates README with corrected project name and license badge

Reviewed Changes

Copilot reviewed 12 out of 12 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
app/p2p/sync_fuzz_test.go	Adds fuzz tests for P2P sync message parsing and serialization
app/models/alert_message_types_fuzz_test.go	Adds fuzz tests for various alert message type parsing
app/models/alert_message_fuzz_test.go	Adds fuzz tests for main alert message parsing and serialization
app/models/alert_message_invalidate_block.go	Adds length validation before accessing block hash bytes
app/models/alert_message.go	Updates minimum message length check from 16 to 20 bytes
app/config/load_fuzz_test.go	Adds fuzz tests for configuration file parsing
app/config/load.go	Makes return statement explicit
app/models/model/model_internals.go	Makes return statement explicit
app/models/model/model.go	Makes return statement explicit
Dockerfile	Pins base images to SHA256 digests for security
README.md	Updates project name and license badge
.github/dependabot.yml	Removes incorrect comment

Comments suppressed due to low confidence (1)

app/models/alert_message_invalidate_block.go:42

• The check for zero-length reason contradicts the fuzz test seed cases that include zero-length reasons (line 332 in alert_message_types_fuzz_test.go: minMsgInvalidate = append(minMsgInvalidate, 0x00)). This will cause the fuzz test to fail. Either remove this validation if zero-length reasons are acceptable, or update the fuzz test to not include zero-length reason test cases.

	if length == 0 {
		return ErrNoReasonMessageProvided
	}

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud