add check with hardened build flags

pauldreik · Jan 12, 2025 · 39f7e2c · 39f7e2c
1 parent 11a62dd
commit 39f7e2c
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/workflows/debian-bookworm.yml b/.github/workflows/debian-bookworm.yml
@@ -28,6 +28,13 @@ jobs:
       run: make check
     - name: make distcheck
       run: make distcheck CXXFLAGS=-std=c++11
+    - name: build with hardened build flags
+      run: |
+        make clean
+        eval $(DEB_BUILD_MAINT_OPTIONS="hardening=+all qa=+all,-canary reproducible=+all" dpkg-buildflags --export=sh)
+        ./configure
+        make
+        make check
     - name: store the logs as an artifact
       if: ${{ always() }}
       uses: actions/upload-artifact@v4