Ah, sorry, there's a typo, drop the https: `go get github.com/kr/godep`

Yes, godep is necessary for repeatable builds (it accomplishes the same goal as bundler).