Reduce the size of the Go toolchain

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

• Close this issue

Summary

The Go toolchain when installed can be upwards of 400MiB, but is magnitudes smaller when packaged at around 100MiB.

Improvements

Compressing or using the packaged version of the toolchain reduces the time it takes to download the gemnasium and sbomgen-golang images.

Risks

Installing the Go package can increase the scan times. In previous tests, this small increase in times can cause the integration tests to timeout. This can be mitigated by only installing the Go toolchain when required instead of when launching the analyzer.

Involved components

Optional: Intended side effects

Optional: Missing test coverage