Producing static PIE binaries is a bigger challenge still.

  $ go build -ldflags '-linkmode external -s -w -extldflags "--static-pie"' -buildmode=pie -tags 'osusergo,netgo,static_build' main.go

For anyone curious to delve into what is this and why: https://www.leviathansecurity.com/blog/aslr-protection-for-s...