Skip to content
Build & Release

Build - build(binding.gyp): add the OpenSSF compiler and linker hardening baseline POSIX builds shipped with almost no hardening: no stack protector, no FORTIFY, no format-string hardening, no RELRO/NX, no control-flow integrity. Windows was well covered; Linux and macOS were not. Adds, per the OpenSSF Compiler Options Hardening Guide: all POSIX -fstack-protector-strong, -D_FORTIFY_SOURCE=2, -Wformat -Wformat=2 -Werror=format-security Linux -fstack-clash-protection, -D_GLIBCXX_A... #310

Sign in to view logs

Build - build(binding.gyp): add the OpenSSF compiler and linker hardening baseline POSIX builds shipped with almost no hardening: no stack protector, no FORTIFY, no format-string hardening, no RELRO/NX, no control-flow integrity. Windows was well covered; Linux and macOS were not. Adds, per the OpenSSF Compiler Options Hardening Guide: all POSIX -fstack-protector-strong, -D_FORTIFY_SOURCE=2, -Wformat -Wformat=2 -Werror=format-security Linux -fstack-clash-protection, -D_GLIBCXX_A...

Build - build(binding.gyp): add the OpenSSF compiler and linker hardening baseline POSIX builds shipped with almost no hardening: no stack protector, no FORTIFY, no format-string hardening, no RELRO/NX, no control-flow integrity. Windows was well covered; Linux and macOS were not. Adds, per the OpenSSF Compiler Options Hardening Guide: all POSIX -fstack-protector-strong, -D_FORTIFY_SOURCE=2, -Wformat -Wformat=2 -Werror=format-security Linux -fstack-clash-protection, -D_GLIBCXX_A... #310

Triggered via push July 13, 2026 21:21
@mceachenmceachen
pushed 87684a6
main
Status Success
Total duration 18m 56s
Artifacts 10

build.yml

on: push
Matrix: prebuild-linux-glibc
prebuild-mac-x64
2m 27s
prebuild-mac-x64
prebuild-mac-arm64
55s
prebuild-mac-arm64
prebuild-win-x64
3m 19s
prebuild-win-x64
prebuild-win-arm64
4m 1s
prebuild-win-arm64
Matrix: prebuild-linux-musl
lint
3m 33s
lint
Matrix: test-ubuntu
Matrix: test-api-compatibility
Matrix: test-mac-win
Matrix: test-alpine
publish
publish
Fit to window
Zoom out
Zoom in

Annotations

1 notice
test-api-compatibility (macos-latest, 24)
The macos-latest label will migrate to macOS 26 beginning June 15, 2026. For more information see https://github.com/actions/runner-images/issues/14167

Artifacts

Produced during runtime
Name Size Digest
prebuilds-linux-arm64-glibc
1.16 MB
sha256:1de2a1d893c2af5d10e92ea9a4b62d11affc73b1ebd67ffd956d2d0967a6ef64
prebuilds-linux-arm64-musl
1.33 MB
sha256:68c9515eb91c51a471eb654773be56c5bae4d4c984211f80b04bafe42a819b0a
prebuilds-linux-x64-glibc
1.19 MB
sha256:bdd95a55aeeb8b87c61aaaecea8362344c1878ee3fb31c5b9842f96e890e0e41
prebuilds-linux-x64-musl
1.32 MB
sha256:39a7511ef4098beed5deae9ac53859379cdb5bfe5c84767dd05692c457383a5c
prebuilds-mac-arm64
1.04 MB
sha256:c8900e3ac7c5fd01a581761c97fbcd8025a77796ef8243b5f3730dbf25cb80ca
prebuilds-mac-x64
1.13 MB
sha256:627e1dfd42a3134580823d718dc75d8874cc682b1bdf3dcc75bae5ff7d96a528
prebuilds-win-arm64
1020 KB
sha256:4ab6114f37d77beeee6d9dd3c8bf20b3e58ee82014db9bbb6431d9309e30bea0
prebuilds-win-x64
1.12 MB
sha256:b5fa9592e0431df7d366c0768cf4949a265a146f4f9c9e4166251f4e08e61b4e
test-extension-linux-arm64-musl
4.7 KB
sha256:275b5cae4fd5c6bcb6cfe0cc0fe8efc0ddff3737edb26586a867171aa8437308
test-extension-linux-x64-musl
3.35 KB
sha256:497ed4bddedb34b70cf5bb8daceffda3d3b87de604e355d18004cd50e748b0d1