I have a program with source code hosted on GitHub that uses Go Modules introduced in go 1.11.

`go.mod` file describes my dependencies, but `go.sum` file seems to be a lockfile. Should I be adding `go.sum` to my repository or should I gitignore it?