We currently manage go deps with glide. Though we have discussed moving off of it I don't think we are currently ready. As such, we need to make sure when we are pulling internal deps that we pull them from the correct branch since we now have california.
security-api-gateway pulls in edgex-go as a dep.
The glide.yaml for california branch (of security-api-gateway) should pull in the california branch of edgex-go.
This would be a good discussion point for the Core-WG meeting this week to look at if we should do this (if it is really an issue) for sure and some other finer points.