Enable CFGuard by default

Dockerfile

@@ -44,7 +44,7 @@ ARG TOOLCHAIN_ARCHS="i686 x86_64 armv7 aarch64"
 
 ARG DEFAULT_CRT=ucrt
 
-ARG CFGUARD_ARGS=--disable-cfguard
+ARG CFGUARD_ARGS=--enable-cfguard
 
 # Build everything that uses the llvm monorepo. We need to build the mingw runtime before the compiler-rt/libunwind/libcxxabi/libcxx runtimes.
 COPY build-llvm.sh build-lldb-mi.sh strip-llvm.sh install-wrappers.sh build-mingw-w64.sh build-mingw-w64-tools.sh build-compiler-rt.sh build-libcxx.sh build-mingw-w64-libraries.sh build-openmp.sh ./

Dockerfile.dev

@@ -67,7 +67,7 @@ RUN ./install-wrappers.sh $TOOLCHAIN_PREFIX
 
 ARG DEFAULT_CRT=ucrt
 
-ARG CFGUARD_ARGS=--disable-cfguard
+ARG CFGUARD_ARGS=--enable-cfguard
 
 # Build MinGW-w64
 COPY build-mingw-w64.sh ./

build-all.sh

@@ -18,7 +18,7 @@ set -e
 
 LLVM_ARGS=""
 MINGW_ARGS=""
-CFGUARD_ARGS="--disable-cfguard"
+CFGUARD_ARGS="--enable-cfguard"
 
 while [ $# -gt 0 ]; do
     case "$1" in