Are we expected to mirror github on our infrastructure to become resilient in case of a major outage?
You can vendor the dependencies you use [1].
[1] https://golang.org/ref/mod#go-mod-vendor
Its also worth noting that, since crates.io uses github for both authentication and hosting the index, the Rust ecosystem would also be effected if github goes down.