The Linux binary releases appear to be linked against glibc 2.28. To make the binaries compatible with a wider range of Linux distros it would be helpful for a statically compiled binary to be available as well.

The binaries for 1.2.0 from https://pkg.cfssl.org/ are statically compiled, so they work on all the distros tested.

Here is a comparison of the compatibility of static(1.2.0) and dynamic(1.4.0) binaries:

An alternate solution would be to target an older version of glibc - 2.12 would work on all the above except Alpine.