Comment by negus

What you mean here is actually deps pinning + vendoring. It's way out of scope of basic CI concept.