We have go packages in separate repos to the package being built in circle. We have setup the build with a github user key (https://circleci.com/docs/github-security-ssh-keys/) so that it can access the private repos that contain the dependencies. However, calling godep restore results in a git clone https://... call.
Is it possible to force godep restore packages using SSH type urls? Alternatively, is it possible to somehow use the user key to enable auth over HTTPS?
I have tried everything suggested here but so far no joy: https://gist.github.com/shurcooL/6927554
It seems like you're misusing the Godeps :-)
According to their FAQ you should consider checking in vendor directory to the repo, you're building (that is: all the external dependencies).