The steps you describe in this workflow — `go get` + git remote add + git pull + git checkout — works for someone hacking on a personal project, but (IMO) is way too fragile to codify as recommended practice, even in the context of a blog post. The problem you're trying to solve here is (again IMO) inseparable from the problem of Reproducible Builds, and this solution definitely does not create Reproducible Builds...