GVM should verify the file downloaded matches the sha of the file listed on the Golang site prior to extracting and installing