diff --git a/nexus/compiler/Makefile b/nexus/compiler/Makefile
index 7224f05b..3ffe83ca 100644
--- a/nexus/compiler/Makefile
+++ b/nexus/compiler/Makefile
@@ -50,11 +50,17 @@ define run_in_container
   docker run \
   --volume $(realpath .)/..:/go/src/github.com/vmware-tanzu/graph-framework-for-microservices/ \
   --volume ~/.ssh:/root/.ssh \
+  --volume /tmp:/tmp \
+  --volume /go/pkg/mod:/go/pkg/mod \
+  --volume /root/.cache/go-build:/root/.cache/go-build \
   --network=host \
   --workdir ${PKG_NAME} \
   -e http_proxy=$(HTTP_PROXY) \
   -e https_proxy=$(HTTPS_PROXY) \
+  -e GOCACHE=/tmp/go-build-cache \
+  -e GOMODCACHE=/tmp/go-mod-cache \
   --user $(shell id -u):$(shell id -g) \
+  --read-only \
   "${BUILDER_DOCKER_TAG}" /bin/bash -c 'chown -R $(shell id -u) .; ${1}'
 endef
 else
diff --git a/nexus/compiler/builder/Dockerfile b/nexus/compiler/builder/Dockerfile
index 707dbf3e..09f22aea 100644
--- a/nexus/compiler/builder/Dockerfile
+++ b/nexus/compiler/builder/Dockerfile
@@ -22,7 +22,7 @@ RUN git config --global --add safe.directory '*' \
         make=4.3-4.1 \
         coreutils=9.1-1 \
         openssh-client=1:9.2p1-2+deb12u5 \
-    && curl -o /usr/local/bin/jq https://github.com/stedolan/jq/releases/latest/download/jq-linux-amd64 \
+    && curl -L -o /usr/local/bin/jq https://github.com/stedolan/jq/releases/download/jq-1.6/jq-linux64 \
     && chmod +x /usr/local/bin/jq \
     && go install github.com/onsi/ginkgo/ginkgo@v1.16.0 \
     && go install github.com/onsi/gomega/...@v1.18.0 \