build: use distro CFLAGS

Instead of using the default settings, use the ones used to build the
Tumbleweed distro. This should also catch more bugs due to FORTIFY being
enabled.

Signed-off-by: Daniel Wagner <[email protected]>

Author: igaw

.github/workflows/build.yml

@@ -25,6 +25,13 @@ jobs:
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
       - name: build
         run: |
+          if [ "${{ matrix.distro }}" = "tumbleweed" ]; then
+            export CFLAGS="-O2 -Wall -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=3 \
+              -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables \
+              -fstack-clash-protection -Werror=return-type -flto=auto -g"
+            export CXXFLAGS="$CFLAGS"
+            export LDFLAGS="-flto=auto"
+          fi
           scripts/build.sh -b ${{ matrix.buildtype }} -c ${{ matrix.compiler }} -x
       - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         name: upload logs