Comment by cyberax

Go uses the hash of the source code, not the commit ID. So there's no difference between vendoring and using the central repo.