In Go, go.mod acts as both manifest and lockfile. There is never a reason to look at go.sum.