A discussion I just had with @tehbooom highlighted the need many customers have for a FIPS-compliant binary build if they intend to use the CLI in their environments.
Our current experimental binary builds (see the downloadable bins on the 0.4.0 release page) are generated using Bun, because it was simpler to achieve, and the resulting binaries run a bit faster than an equivalent binary generated by Node.js (see this comment for general notes on comparative benchmarks).
Unfortunately, Bun does not yet support FIPS so for compliance we would need to switch back to Node.js for binary builds. We'll also need to identify what kind of environment is required, such as a chainguard image and Node.js built with a FIPS-approved SSL stack. More research will be needed to establish the correct way to do this.
A discussion I just had with @tehbooom highlighted the need many customers have for a FIPS-compliant binary build if they intend to use the CLI in their environments.
Our current experimental binary builds (see the downloadable bins on the 0.4.0 release page) are generated using Bun, because it was simpler to achieve, and the resulting binaries run a bit faster than an equivalent binary generated by Node.js (see this comment for general notes on comparative benchmarks).
Unfortunately, Bun does not yet support FIPS so for compliance we would need to switch back to Node.js for binary builds. We'll also need to identify what kind of environment is required, such as a chainguard image and Node.js built with a FIPS-approved SSL stack. More research will be needed to establish the correct way to do this.