[ci] Add hardening to go binary build

Signed-off-by: Knut Ahlers <knut@ahlers.me>
2024-12-20 11:51:17 +00:00 · 2022-02-26 14:59:02 +01:00 · 2022-02-26 14:59:02 +01:00 · 438bedc99c
commit 438bedc99c
parent ee92cbbb03
1 changed files with 5 additions and 2 deletions
--- a/7
+++ b/7
@ -17,8 +17,11 @@ RUN set -ex \
      npm \
 && make frontend \
 && go install \
-      -ldflags "-X main.version=$(git describe --tags --always || echo dev)" \
-      -mod=readonly
+      -trimpath \
+      -buildmode=pie \
+      -mod=readonly \
+      -modcacherw \
+      -ldflags "-X main.version=$(git describe --tags --always || echo dev)"


 FROM alpine:latest