Statically link binaries and remove debug information (#1615)

Signed-off-by: Paulo Gomes <pjbgf@linux.com>
aquasecurity · May 22, 2024 · 0f8dfaf · 0f8dfaf
1 parent ed51191
commit 0f8dfaf
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -2,10 +2,15 @@
 project_name: kube-bench
 env:
   - GO111MODULE=on
+  - CGO_ENABLED=0
   - KUBEBENCH_CFG=/etc/kube-bench/cfg
 builds:
   - main: main.go
     binary: kube-bench
+    tags:
+      - osusergo
+      - netgo
+      - static_build
     goos:
       - linux
       - darwin
@@ -19,6 +24,9 @@ builds:
       - 6
       - 7
     ldflags:
+      - "-s"
+      - "-w"
+      - "-extldflags '-static'"
       - "-X github.com/aquasecurity/kube-bench/cmd.KubeBenchVersion={{.Version}}"
       - "-X github.com/aquasecurity/kube-bench/cmd.cfgDir={{.Env.KUBEBENCH_CFG}}"
 # Archive customization