[OSV SCALIBR] Performance optimization in the `trace` package to reduce extractor calls when tracing origin layer. Previously, looping through the inventory would result in an `Extract` call. Now, the inventory results are cached via a local map. #1816

	# This workflow will build a golang project
	# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-go

	name: Go

	on:
	push:
	branches: [ "main" ]
	pull_request:
	branches: [ "main" ]

	jobs:
	lint:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-go@v5
	with:
	go-version: 1.22.x

	- name: Run golangci-lint
	uses: golangci/golangci-lint-action@v6
	with:
	version: v1.61.0
	args: --timeout=5m
	# TODO(#346): we're exploring if only-new-issues will help reduce friction in PRs
	lint-just-new:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-go@v5
	with:
	go-version: 1.22.x

	- name: Run golangci-lint
	uses: golangci/golangci-lint-action@v6
	with:
	version: v1.61.0
	only-new-issues: true
	args: --timeout=5m
	tests:
	strategy:
	matrix:
	os: [ubuntu-latest, macos-latest, windows-latest]
	runs-on: ${{ matrix.os }}
	steps:
	- uses: actions/checkout@v4

	- name: Set up Go
	uses: actions/setup-go@v4
	with:
	go-version: 1.22.x

	- name: Install Protoc
	uses: arduino/setup-protoc@v3
	with:
	version: "23.x"
	repo-token: ${{ secrets.GITHUB_TOKEN }}

	- name: Set up protoc-gen-go
	run: go install google.golang.org/protobuf/cmd/protoc-gen-go

	- name: Build
	run: make

	- name: Test
	run: make test

Provide feedback