diff --git a/.github/workflows/ci-scripts-build.yml b/.github/workflows/ci-scripts-build.yml index 4d85d120be..f12ff6368b 100644 --- a/.github/workflows/ci-scripts-build.yml +++ b/.github/workflows/ci-scripts-build.yml @@ -60,7 +60,10 @@ jobs: # Remove respective -Wno-error=... flag once it is fixed. extra: "CMD_CXXFLAGS=-std=c++20 CMD_CPPFLAGS='-fdiagnostics-color + -fstack-protector-strong + -Wformat -Werror + -Werror=format-security -Wno-error=deprecated-declarations -Wno-error=stringop-truncation -Wno-error=restrict @@ -68,8 +71,9 @@ jobs: -Wno-error=nonnull -Wno-error=dangling-pointer -Wno-error=format-overflow - -Wno-error=format-security - -Wno-error=stringop-overread'" + -Wno-error=stringop-overread + -D_FORTIFY_SOURCE=3' + CMD_LDFLAGS=-Wl,-z,relro" - os: ubuntu-20.04 cmp: gcc