Additional Warning/Hardening Test in CI

[Easton97-Jens]

• I added a separate CI workflow/build job for ModSecurity v3 to make compiler warnings and hardening-related issues visible earlier in the development process.
• The job intentionally builds ModSecurity with stricter GCC warning flags such as -Wall, -Wextra, -Wformat, and -Wformat-security.
• The run currently operates in a warn-only mode so existing warnings become visible in CI without immediately failing the entire workflow because of -Werror.
• This helps detect potential issues and regressions early and allows them to be fixed proactively before they appear in Fedora/RHEL packaging or downstream builds.
• In addition, all relevant compiler, linker, and configure flags are printed in the CI logs to improve transparency and reproducibility of the build environment.
• The long-term goal is to continuously reduce warnings and hardening issues and eventually re-enable stricter error handling (-Werror).

#3567

[Copilot]

Pull request overview

Adds an additional CI job intended to surface GCC warnings and common hardening-related build issues for ModSecurity v3 earlier in the development cycle, while keeping the job “warn-only” to avoid immediately breaking CI.

Changes:

• Introduces a new “ModSecurity v3 (warn-only hardening build)” job on Ubuntu 24.04.
• Builds with stricter compiler/linker flags and prints toolchain + build flag configuration to CI logs.
• Auto-detects and installs the latest libluaX.Y-dev package before building.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[airween]

Hi @Easton97-Jens,

could you pick these changes or update your branch?

Thanks!

[airween]

Hi @Easton97-Jens, sorry, you should merge the current master into this branch again. Sorry again.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud