commit ff4bf68b29a4bf75387bc1918e49937758509e78
author Nicolas Williams <nico@cryptonector.com> Mon Jul 31 17:30:35 2023 -0500
committer Nico Williams <nico@cryptonector.com> Wed Aug 02 12:19:19 2023 -0500
tree a085a715dbdfbe1181857f7aa3f7bf3aaf596227
parent fd0d475694bdaf5261340aff9a6a4437b04124dc

Enable stack protection (CI release executables)

.github/workflows/ci.yml

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e1461a6..2975bff 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -92,7 +92,8 @@
             --disable-valgrind \
             --with-oniguruma=builtin \
             --enable-static \
-            --enable-all-static
+            --enable-all-static \
+            CFLAGS="-O2 -pthread -fstack-protector-all"
           make -j"$(nproc)"
           file ./jq
           cp ./jq jq-${{ env.SUFFIX }}
@@ -157,7 +158,8 @@
             --disable-valgrind \
             --with-oniguruma=builtin \
             --enable-static \
-            --enable-all-static
+            --enable-all-static \
+            CFLAGS="-O2 -pthread -fstack-protector-all"
           make -j"$(nproc)"
           strip ./jq
           file ./jq
@@ -234,7 +236,8 @@
             --with-oniguruma=builtin \
             --disable-shared \
             --enable-static \
-            --enable-all-static
+            --enable-all-static \
+            CFLAGS="-O2 -pthread -fstack-protector-all"
           make -j$(nproc)
           file ./jq.exe
           cp ./jq.exe jq-${{ env.SUFFIX }}.exe