By default build with -buildmode=pie when available
Open
lifecycle/frozen
- Dominant language
- Go
- Stars
- 8.5k
- Forks
- 447
- PR merge metrics
- No merged PRs in 30d
Description
I believe this would enable https://en.wikipedia.org/wiki/Address_space_layout_randomization and help our security posture
Contributor guide
Research direction
No files, tests, or entry points are identified in the issue. Start by locating where ko configures Go build flags, then determine how to enable -buildmode=pie only when supported; done means default builds use PIE where available without breaking unsupported environments.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- build-system, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100