If you're like me and make golang apps with private packages on GitHub, you're going to have a bad time deploying to Heroku.

This is because the heroku buildpack for go has to `go get github.com/user/private-repo` the necessary packages. Public repos work fine for this, but private repos need credentials. There's a few reasons this isn't easy on Heroku.

I ended up working around it[1] but am still not happy with the security implications.

[1] https://github.com/kr/heroku-buildpack-go/issues/17#issuecom...