feat(hardening): Apply FIPS hardening to the patcher

sysdiglabs · Jan 22, 2025 · 5777a0c · 5777a0c
1 parent 2fc1be8
commit 5777a0c
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 4 deletions.
diff --git a/runtimes/cloudformation/Makefile b/runtimes/cloudformation/Makefile
@@ -1,17 +1,17 @@
-GOOS?=linux
-GOARCH?= amd64
+GOOS ?= linux
+GOARCH ?= amd64
 
 agent-kilt.zip: cmd/handler/handler
 	cd cmd/handler/ && zip ../../agent-kilt.zip ./handler
 
 cmd/handler/handler:
-	cd cmd/handler && CGO_ENABLED=0 GOOS=${GOOS} GOARCH=${GOARCH} go build .
+	cd cmd/handler && CGO_ENABLED=1 GOEXPERIMENT=boringcrypto GOOS=${GOOS} GOARCH=${GOARCH} go build .
 
 clean:
 	rm agent-kilt.zip || true
 	rm cmd/handler/handler || true
 
 test:
-	go test -v ./...
+	GOEXPERIMENT=boringcrypto go test -v ./...
 
 .PHONY: clean test
diff --git a/runtimes/cloudformation/cmd/handler/main.go b/runtimes/cloudformation/cmd/handler/main.go
@@ -2,6 +2,7 @@ package main
 
 import (
 	"context"
+	_ "crypto/tls/fipsonly"
 	"encoding/json"
 	"github.com/Jeffail/gabs/v2"
 	"os"