From 9a0113f83429df54a350cc1dfe9cf2d4c1ea1974 Mon Sep 17 00:00:00 2001
From: Michael Davidsaver <mdavidsaver@gmail.com>
Date: Fri, 14 Jun 2024 15:24:03 -0700
Subject: [PATCH] GHA: add gcc with -D_FORTIFY_SOURCE=3

---
 .github/workflows/ci-scripts-build.yml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci-scripts-build.yml b/.github/workflows/ci-scripts-build.yml
index e175a3b7c..62eb89eb7 100644
--- a/.github/workflows/ci-scripts-build.yml
+++ b/.github/workflows/ci-scripts-build.yml
@@ -60,7 +60,10 @@ jobs:
             # Remove respective -Wno-error=... flag once it is fixed.
             extra: "CMD_CXXFLAGS=-std=c++20
                     CMD_CPPFLAGS='-fdiagnostics-color
+                                  -fstack-protector-strong
+                                  -Wformat
                                   -Werror
+                                  -Werror=format-security
                                   -Wno-error=deprecated-declarations
                                   -Wno-error=stringop-truncation
                                   -Wno-error=restrict
@@ -68,8 +71,9 @@ jobs:
                                   -Wno-error=nonnull
                                   -Wno-error=dangling-pointer
                                   -Wno-error=format-overflow
-                                  -Wno-error=format-security
-                                  -Wno-error=stringop-overread'"
+                                  -Wno-error=stringop-overread
+                                  -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=3'
+                    CMD_LDFLAGS=-Wl,-z,relro"
 
           - os: ubuntu-20.04
             cmp: gcc