I don't know if it's a common or even a good practice, but I like to go mod vendor and add the result to my repo.