Disable CGO

This changes the build tasks for this project to disable CGO. The goal
is to create safer binaries by reducing the attack surface and avoiding
dependence on third-party modules that use C.

Author: ericcornelissen

tasks.go

@@ -71,7 +71,7 @@ func TaskAuditVulnerabilities(t *T) error {
 // Build the ghasum binary for the current platform.
 func TaskBuild(t *T) error {
 	t.Log("Building...")
-	return t.Exec(`go build -trimpath ./cmd/ghasum`)
+	return t.Exec(`env CGO_ENABLED=0 go build -trimpath ./cmd/ghasum`)
 }
 
 // Build the ghasum binary for all supported platforms.
@@ -133,7 +133,7 @@ func TaskBuildAll(t *T) error {
 
 		var (
 			compile = fmt.Sprintf(
-				"env GOOS=%s GOARCH=%s go build -trimpath -o %s ./cmd/ghasum",
+				"env GOOS=%s GOARCH=%s CGO_ENABLED=0 go build -trimpath -o %s ./cmd/ghasum",
 				target.os,
 				target.arch,
 				executable,