add -buildmode=pie flags for go binary builds

Author: github-actions[bot]

Makefile

@@ -40,7 +40,7 @@ ifeq (, $(shell command -v ocb 2>/dev/null))
 	[ "$${machine}" != x86_64 ] || machine=amd64 ;\
 	echo "Installing ocb ($${os}/$${machine}) at $(OTELCOL_BUILDER_DIR)";\
 	mkdir -p $(OTELCOL_BUILDER_DIR) ;\
-	CGO_ENABLED=0 go install -trimpath -ldflags="-s -w" go.opentelemetry.io/collector/cmd/builder@v$(OTELCOL_BUILDER_VERSION) ;\
+	CGO_ENABLED=0 go install -trimpath -ldflags="-s -w" -buildmode=pie go.opentelemetry.io/collector/cmd/builder@v$(OTELCOL_BUILDER_VERSION) ;\
 	mv $$(go env GOPATH)/bin/builder $(OTELCOL_BUILDER) ;\
 	}
 else

cmd/goreleaser/internal/configure.go

@@ -73,7 +73,7 @@ func Build(dist string) config.Build {
 		Binary: dist,
 		BuildDetails: config.BuildDetails{
 			Env:     []string{"CGO_ENABLED=0"},
-			Flags:   []string{"-trimpath"},
+			Flags:   []string{"-trimpath", "-buildmode=pie"},
 			Ldflags: []string{"-s", "-w"},
 		},
 		Goos:   []string{"darwin", "linux", "windows"},

distributions/otelcol-contrib/.goreleaser.yaml

@@ -46,6 +46,7 @@ builds:
       - -w
     flags:
       - -trimpath
+      - -buildmode=pie
     env:
       - CGO_ENABLED=0
 archives:

distributions/otelcol-k8s/.goreleaser.yaml

@@ -22,6 +22,7 @@ builds:
       - -w
     flags:
       - -trimpath
+      - -buildmode=pie
     env:
       - CGO_ENABLED=0
 archives:

distributions/otelcol-otlp/.goreleaser.yaml

@@ -45,6 +45,7 @@ builds:
       - -w
     flags:
       - -trimpath
+      - -buildmode=pie
     env:
       - CGO_ENABLED=0
 archives:

distributions/otelcol/.goreleaser.yaml

@@ -46,6 +46,7 @@ builds:
       - -w
     flags:
       - -trimpath
+      - -buildmode=pie
     env:
       - CGO_ENABLED=0
 archives: