diff --git a/dev/ci/postsubmits/release-kcc-cli b/dev/ci/postsubmits/release-kcc-cli
index 01b5867211..732f8bb542 100755
--- a/dev/ci/postsubmits/release-kcc-cli
+++ b/dev/ci/postsubmits/release-kcc-cli
@@ -20,5 +20,7 @@ set -o pipefail
 REPO_ROOT="$(git rev-parse --show-toplevel)"
 cd ${REPO_ROOT}
 
+${REPO_ROOT}/dev/tasks/install-tools
+
 ${REPO_ROOT}/dev/tasks/generate-licenses
 ${REPO_ROOT}/dev/tasks/build-cli-bundle
diff --git a/dev/tasks/install-tools b/dev/tasks/install-tools
new file mode 100755
index 0000000000..07c3ed0ecb
--- /dev/null
+++ b/dev/tasks/install-tools
@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+# Copyright 2024 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+set -o errexit
+set -o nounset
+set -o pipefail
+
+REPO_ROOT="$(git rev-parse --show-toplevel)"
+cd "${REPO_ROOT}"
+
+if [[ ! -x go ]]; then
+  echo "Must install go; assuming we are running in a container"
+  curl -L -o /tmp/go.tar.gz https://go.dev/dl/go1.22.4.linux-amd64.tar.gz
+  sha256sum -c - <<EOF
+ba79d4526102575196273416239cca418a651e049c2b099f3159db85e7bade7d /tmp/go.tar.gz
+EOF
+  tar -C /usr/local -xzf /tmp/go.tar.gz
+  ln -sf /usr/local/go/bin/go /usr/bin/go
+  rm /tmp/go.tar.gz
+fi