diff --git a/scripts/build.sh b/scripts/build.sh
index 72af007ee..344e39d69 100755
--- a/scripts/build.sh
+++ b/scripts/build.sh
@@ -36,12 +36,15 @@ fi
 
 if ! which gox > /dev/null; then
     echo "==> Installing gox..."
-    go get -u github.com/mitchellh/gox
+    go get github.com/mitchellh/gox
 fi
 
 # Instruct gox to build statically linked binaries
 export CGO_ENABLED=0
 
+# Set module download mode to readonly to not implicitly update go.mod
+export GOFLAGS="-mod=readonly"
+
 # In release mode we don't want debug information in the binary
 if [[ -n "${TF_RELEASE}" ]]; then
     LD_FLAGS="-s -w"