From 65e7f7919012280e71f313b83c8a2ab5c16a1b08 Mon Sep 17 00:00:00 2001
From: Brian Lee <brianlee@amazon.com>
Date: Mon, 20 Apr 2026 17:38:59 -0700
Subject: [PATCH] Enable PIE (Position Independent Executable) for security
 hardening

- Add -buildmode=pie to Go build command
- Enables ASLR (Address Space Layout Randomization)
- Improves security against memory-based attacks
- Works on all major platforms (Linux, macOS, Windows)
---
 Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Makefile b/Makefile
index c67f387..3bafd1a 100644
--- a/Makefile
+++ b/Makefile
@@ -17,7 +17,7 @@ help:
 
 .PHONY: build
 build: test ## build the aws signer notation plugin
-	go build -o ./build/bin/notation-com.amazonaws.signer.notation.plugin ./cmd
+	go build -buildmode=pie -o ./build/bin/notation-com.amazonaws.signer.notation.plugin ./cmd
 
 .PHONY: test
 test: generate-mocks ## run the unit tests