# annocheck /usr/local/bin/envoy 
annocheck: Version 9.23.
Hardened: envoy: WARN: notes produced by annobins compiled for more than one version of gcc (9 vs 8).
Hardened: envoy: WARN: this file was built by more than one version of gcc (9 and 8).
Hardened: envoy: WARN: notes produced by annobins compiled for more than one version of gcc (9 vs 8).
Hardened: envoy: WARN: this file was built by more than one version of gcc (9 and 8).
Hardened: envoy: FAIL: Control flow protection has been enabled for only some parts of the binary. Other parts (probably assembler sources) are missing the protection, and without it global control flow protection cannot be enabled.

[root@aebc98816972 work]# annocheck --version
annocheck: Version 9.23.
 BuiltBy: Version 1.1.
 Hardened: Version 1.3.
 Notes: Version 1.0.
 Section Size: Version 1.1.
 Timing: Version 1.0.

[root@aebc98816972 work]# /usr/local/bin/envoy --version
/usr/local/bin/envoy version: 24fe377d72d148cf912bacf4b841f0fc76ec752d/1.16.1/OSSM 2.1.0-5.el8/DEBUG/OpenSSL