fix: avoid concurrent access to the global map (#4014)

pkg/downloader/download.go

@@ -5,6 +5,7 @@ import (
 	"os"
 
 	getter "github.com/hashicorp/go-getter"
+	"golang.org/x/exp/maps"
 	"golang.org/x/xerrors"
 )
 
@@ -34,16 +35,19 @@ func Download(ctx context.Context, src, dst, pwd string) error {
 
 	var opts []getter.ClientOption
 
+	// Clone the global map so that it will not be accessed concurrently.
+	getters := maps.Clone(getter.Getters)
+
 	// Overwrite the file getter so that a file will be copied
-	getter.Getters["file"] = &getter.FileGetter{Copy: true}
+	getters["file"] = &getter.FileGetter{Copy: true}
 
 	// Build the client
 	client := &getter.Client{
 		Ctx:     ctx,
 		Src:     src,
 		Dst:     dst,
 		Pwd:     pwd,
-		Getters: getter.Getters,
+		Getters: getters,
 		Mode:    getter.ClientModeAny,
 		Options: opts,
 	}