Go dependencies are managed using the dep tool.
USAGE
Add a new package:
# Add import reference of acme.com/widget.
$ vi pkg/foo.go
# Add dependency using dep ensure command
$ dep ensure
Locking to a specific commit of a repo:
Add a "constraint" to Gopkg.toml specifying the version/revision needed
More help here