GillMacedo

Explains why Go module dependency versions changed between two revisions (a git ref or two directories). For every module that was raised, added, lowered or removed in the build list, it names the dependency that required the new version and the chain back to…

Compares the log events a Go module writes at two revisions (a git ref or two directories) and reports changes that silently break log-based alerts, dashboards and saved searches, such as a reworded or removed log message, a renamed or removed attribute key,…

Compares the JSON that a Go module's structs encode to at two revisions (a git ref or two directories) and reports wire-format breaks that compile cleanly, such as renamed or removed json keys, a json tag changed to "-", value types that changed (number to…

Compares two sets of rendered Kubernetes manifests, what is deployed now and what is about to be applied, and reports changes the API server rejects because the field can't change after creation, such as a Deployment, DaemonSet or StatefulSet selector,…

Checks that the paths a Go program reads from an embed.FS are really embedded, by comparing ReadFile, Open, ReadDir, fs.Sub, fs.Glob, http.ServeFileFS and template.ParseFS calls with the //go:embed patterns and the files on disk. Finds typos, files left out…

Checks a Go Kubernetes operator or controller for API calls its RBAC doesn't grant. Type-checks the code, maps every controller-runtime and client-go call (Get, List, Create, Update, Patch, Delete, Status().Update, CreateOrUpdate, For/Owns watches, event…

Finds Go files that no CI build compiles because of build tags (//go:build integration, e2e, fuzz), GOOS or GOARCH file suffixes (_windows.go, _darwin.go, _arm64.go) or cgo, and compiles each one in a configuration that includes it to show whether it still…

Checks, without running anything, whether a Linux program will start inside a container image, from a docker save tar, an OCI layout or a root filesystem. Finds a missing ELF loader ("exec /app no such file or directory"), a wrong CPU architecture ("exec…

Checks that go build -ldflags "-X importpath.name=value" flags really set the version, commit and build date variables of a Go program, in source through go list or in a built binary. The Go linker ignores an -X flag whose package path or variable name is…

Explains why a Go build, go test or go vet run missed the Go build cache (GOCACHE), by recording two runs with GODEBUG=gocachehash=1 and comparing their cache keys. Names each input that changed, such as the checkout directory without -trimpath, the Go…

Checks whether a Go PGO profile (default.pgo) still matches the code it is applied to, by building the main package with the profile and reading which hot call sites the compiler still matches. Explains each lost function or call site, such as a rename, a…

Triages a Go package's fuzz corpus (testdata/fuzz/FuzzX files from go test -fuzz, nightly CI fuzzing or a downloaded artifact). Runs each corpus entry in its own process, groups failing entries by panic message and stack frame or by the failing t.Fatal line,…