Cilium adds the golang builtin package "testing" to its production builds, because it is imported by the following non-testing files:

• pkg/endpoint/endpoint.go
• pkg/kvstore/dummy.go*
• pkg/policy/l4.go
• pkg/policy/mapstate.go

The "testing" package does not have any know security vulnerabilities, but it does add weight and surface area to production Cilium. It should be removed.