Verifying Go changes

• Security scanning Injection, unsafe APIs and tainted data reaching a sink.
  codeql 23% · 7 of 30 repos

  runs via GitHub Action github/codeql-action/analyze

  exit codes, docs, alternatives, where it runs

  • Runs inci
  • Seen ingin-gonic/gin, prometheus/prometheus, traefik/traefik, argoproj/argo-cd, vitessio/vitess, wavetermdev/waveterm
  • Docshttps://github.com/github/codeql
• Secret scanning Credentials and tokens committed to the repository.
  gitleaks 7% · 2 of 30 repos

  runs via pre-commit hook gitleaks

  exit codes, docs, alternatives, where it runs

  • Runs inpre-commit
  • Seen inmaximhq/bifrost, snyk/cli
  • Docshttps://github.com/gitleaks/gitleaks
• Dependency audit Known-vulnerable or disallowed dependencies and licenses.
  govulncheck 10% · 3 of 30 repos

  govulncheck ./...copy

  exit codes, docs, alternatives, where it runs

  • Commands seengovulncheck -format json ./cmd/tofu
govulncheck ./...
uses golang/govulncheck-action
  • Runs inci
  • Alternativesdependency-review 3%
  • Seen inprometheus/prometheus, gofiber/fiber, opentofu/opentofu
  • Docshttps://github.com/golang/vuln

• Prevent Secret LeakageApply strict trust boundaries to authentication/credential state: - **Reset per-request sensitive fields on reuse** (especially pooled re...

  maximhq/bifrost Security Go llm-infra 2026-07-27

  copy raw open
• Security Field ValidationWhen adding or modifying security-sensitive API fields (including fields written by schedulers/kubelets or reflected in Pod/Container sec...

  kUbernetes/kUbernetes Security Go orchestration 2026-10-22

  copy raw open
• Consistent Authorization and AuthWhen changing or adding security-sensitive functionality, keep authorization semantics stable and use project-wide shared validation/auth...

  looplj/axonhub Security Go llm-infra 2026-07-29

  copy raw open
• Prevent information disclosureAvoid exposing sensitive information through error messages, logs, configuration, or other output channels that might be accessible to un...

  kubernetes/kubernetes Security Go orchestration 2025-07-24

  copy raw open
• Prevent sensitive data exposureImplement comprehensive checks to prevent accidental exposure of sensitive data through multiple vectors in configuration files and deplo...

  docker/compose Security Go orchestration 2025-06-30

  copy raw open

20 more in Security — the playbook lists the top 12.

• Type checking Wrong types, unhandled null or None, call signatures broken across modules.

  The compiler type-checks on every build and test run; a failing build is this check failing.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.
  go-test 63% · 19 of 30 repos

  go test ./...copy

  exit codes, docs, alternatives, where it runs

  • Commands seengo test ./...
go test -v ./internal/command/e2etest
go test $(ESBUILD_RACE) ./cmd/... ./internal/... ./pkg/...
  • Runs inpre-commit, ci, local
  • Seen inavelino/awesome-go, ollama/ollama, fatedier/frp, grafana/grafana, prometheus/prometheus, traefik/traefik
  • Docshttps://github.com/golang/go
• Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Craft actionable errorsCreate error messages that provide precise context, avoid unnecessary details, and give users clear actions to take. Error messages shoul...

  opentofu/opentofu Error Handling Go cloud-infra 2025-06-02

  copy raw open
• Streaming error invariantsAdopt a single, consistent error-handling strategy for streaming (and other multi-step flows): define retry semantics, tolerate isolated ...

  maximhq/bifrost Error Handling Go llm-infra 2026-07-13

  copy raw open
• API field documentationAPI fields must be comprehensively documented with clear behavior specifications, format constraints, and interaction details. This inclu...

  kubernetes/kubernetes API Go orchestration 2025-07-23

  copy raw open
• Wrap errors with contextWhen propagating errors up the call stack, always wrap them with contextual information about the failing operation using fmt.Errorf with...

  argoproj/argo-cd Error Handling Go orchestration 2025-05-23

  copy raw open
• Preserve API ContractsMaintain deterministic, provider-compatible API contracts by (1) applying overrides explicitly and attempt-scoped (no hidden side effects...

  maximhq/bifrost API Go llm-infra 2026-07-21

  copy raw open

71 more in API, Error Handling, Null Handling — the playbook lists the top 12.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.
  go-test 63% · 19 of 30 repos

  go test ./...copy

  exit codes, docs, alternatives, where it runs

  • Commands seengo test ./...
go test -v ./internal/command/e2etest
go test $(ESBUILD_RACE) ./cmd/... ./internal/... ./pkg/...
  • Runs inpre-commit, ci, local
  • Seen inavelino/awesome-go, ollama/ollama, fatedier/frp, grafana/grafana, prometheus/prometheus, traefik/traefik
  • Docshttps://github.com/golang/go
• Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
  ci-matrix 43% · 13 of 30 repos

  analyze (language: 2)copy

  exit codes, docs, alternatives, where it runs

  • Commands seenanalyze (language: 2)
analyze (language: 1)
analyze (language: 3)
  • Runs inci
  • Seen inollama/ollama, gin-gonic/gin, grafana/grafana, prometheus/prometheus, traefik/traefik, evanw/esbuild
  • Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations

• Ensure deterministic executionWhen working with Temporal workflows, maintaining deterministic behavior\ \ is critical for reliable replay and execution across distribu...

  temporalio/temporal Temporal Go orchestration 2025-05-02

  copy raw open
• Manage workflow state transitionsWhen working with temporal workflows, always implement explicit state transitions rather than abrupt deletions. Workflows should proceed ...

  vitessio/vitess Temporal Go data-systems 2025-01-14

  copy raw open

• Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Fuzzing Crashes, panics and hangs on malformed input, especially in parsers and decoders.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Mutation testing Tests that keep passing whatever the code does.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Proofs and specifications Design-level bugs in protocols and algorithms, checked against a specification.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Optimize algorithmic efficiencyChoose efficient algorithms and data structures to minimize computational overhead and improve code maintainability. Prefer positive logi...

  volcano-sh/volcano Algorithms Go orchestration 2025-08-27

  copy raw open
• simplify complex algorithmsWhen implementing algorithms, prioritize simplicity and maintainability over premature optimization. Complex algorithms should be broken ...

  prometheus/prometheus Algorithms Go observability 2025-07-07

  copy raw open
• Preserve Aggregation InvariantsWhen transforming/aggregating streamed or ranged data, explicitly define the invariants your algorithm depends on (index meaning, ownersh...

  maximhq/bifrost Algorithms Go llm-infra 2026-07-23

  copy raw open
• Optimize data structuresChoose and implement data structures with careful consideration of algorithmic complexity, memory usage, and Go''s specific performance c...

  vitessio/vitess Algorithms Go data-systems 2025-04-28

  copy raw open
• Optimize with standard libraryWhen implementing algorithms, prefer using Go's standard library over custom implementations or external dependencies for common operatio...

  ollama/ollama Algorithms Go llm-infra 2025-03-12

  copy raw open

18 more in Algorithms — the playbook lists the top 12.

• Concurrency model checking Races and orderings that fail only under specific interleavings.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Undefined-behaviour detection Memory-safety and aliasing violations in unsafe code.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Cancellation Aware ConcurrencyWhen adding or modifying concurrent code, treat context/cancellation, goroutine lifecycle, and state ownership as first-class requirement...

  kUbernetes/kUbernetes Concurrency Go orchestration 2026-10-25

  copy raw open
• Immutable Snapshots And GatesWhen concurrency crosses subsystem boundaries (HTTP handlers, streaming, background workers, plugin hooks), treat shared state as immutab...

  maximhq/bifrost Concurrency Go llm-infra 2026-07-28

  copy raw open
• Prevent concurrent access racesWhen sharing data across goroutines, always use proper synchronization mechanisms to prevent race conditions. Race conditions are difficu...

  vitessio/vitess Concurrency Go data-systems 2025-02-28

  copy raw open
• Protect shared stateEnsure mutable shared data is never exposed or accessed without explicit synchronization. When data crosses goroutine boundaries you must...

  wavetermdev/waveterm Concurrency Go devtools 2025-02-13

  copy raw open
• Lock with defer unlockAlways follow the lock-defer-unlock pattern when protecting shared resources with mutexes. Acquire the lock, immediately use defer to ens...

  influxdata/influxdb Concurrency Go data-systems 2025-02-12

  copy raw open

15 more in Concurrency — the playbook lists the top 12.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.
  go-test 63% · 19 of 30 repos

  go test ./...copy

  exit codes, docs, alternatives, where it runs

  • Commands seengo test ./...
go test -v ./internal/command/e2etest
go test $(ESBUILD_RACE) ./cmd/... ./internal/... ./pkg/...
  • Runs inpre-commit, ci, local
  • Seen inavelino/awesome-go, ollama/ollama, fatedier/frp, grafana/grafana, prometheus/prometheus, traefik/traefik
  • Docshttps://github.com/golang/go
• Fuzzing Crashes, panics and hangs on malformed input, especially in parsers and decoders.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Streaming network safetyWhen adding or modifying network transports/proxies/stream multiplexing (HTTP RoundTripper, SPDY↔websocket translators, port-forward webs...

  kUbernetes/kUbernetes Networking Go orchestration 2026-10-25

  copy raw open
• Use network timeoutsEnsure all network operations are cancellable, timeout-protected, and executed where the resource lives. Motivation - Network calls can h...

  wavetermdev/waveterm Networking Go devtools 2025-02-06

  copy raw open
• Use proper network constantsWhen writing network-related code, always use named constants from system packages instead of magic numbers, and ensure complete protocol...

  golang/go Networking Go runtimes 2022-10-17

  copy raw open
• network configuration consistencyEnsure network-related configurations remain consistent across different components and avoid unintended overwrites that could break conn...

  istio/istio Networking Go orchestration 2025-08-14

  copy raw open
• Connection lifecycle managementImplement comprehensive lifecycle management for network connections. Ensure proper initialization, authentication, monitoring, and termi...

  fatedier/frp Networking Go cloud-infra 2022-01-12

  copy raw open

10 more in Networking, Axios — the playbook lists the top 12.

• End-to-end browser tests User flows broken across components, routing and the network.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Linting Bug-prone patterns, unused code and conventions the formatter does not cover.
  golangci-lint 73% · 22 of 30 repos

  golangci-lint runcopy

  exit codes, docs, alternatives, where it runs

  • Commands seengolangci-lint run
golangci-lint --version
golangci-lint run --fix --verbose
  • Runs inpre-commit, ci, local
  • Alternativesgo-vet 17%, staticcheck 3%
  • Seen inollama/ollama, kubernetes/kubernetes, fatedier/frp, gin-gonic/gin, grafana/grafana, prometheus/prometheus
  • Docshttps://github.com/golangci/golangci-lint

• Unit and integration tests Behaviour regressions on the paths the tests exercise.
  go-test 63% · 19 of 30 repos

  go test ./...copy

  exit codes, docs, alternatives, where it runs

  • Commands seengo test ./...
go test -v ./internal/command/e2etest
go test $(ESBUILD_RACE) ./cmd/... ./internal/... ./pkg/...
  • Runs inpre-commit, ci, local
  • Seen inavelino/awesome-go, ollama/ollama, fatedier/frp, grafana/grafana, prometheus/prometheus, traefik/traefik
  • Docshttps://github.com/golang/go
• Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
  ci-matrix 43% · 13 of 30 repos

  analyze (language: 2)copy

  exit codes, docs, alternatives, where it runs

  • Commands seenanalyze (language: 2)
analyze (language: 1)
analyze (language: 3)
  • Runs inci
  • Seen inollama/ollama, gin-gonic/gin, grafana/grafana, prometheus/prometheus, traefik/traefik, evanw/esbuild
  • Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations

• Deterministic DB SemanticsMake database changes (queries, migrations, and tests) explicit about shape and semantics: don’t rely on driver defaults, cached plan inf...

  maximhq/bifrost Database Go llm-infra 2026-07-28

  copy raw open
• Stability-First CachingWhen caching affects externally visible payloads (prompts, auth/JWT inputs, token summaries), ensure the *serialized representation used ...

  maximhq/bifrost Caching Go llm-infra 2026-07-20

  copy raw open
• Stable Backward-Compatible MigrationsWhen adding schema/config fields, design migrations to be stable across upgrade/downgrade boundaries: - Handle “unset vs default” explici...

  maximhq/bifrost Migrations Go llm-infra 2026-07-22

  copy raw open
• ensure migration idempotencyDatabase migrations must be designed to run safely multiple times without causing errors or data corruption. This involves using structur...

  SigNoz/signoz Migrations Go observability 2025-08-26

  copy raw open
• Minimize database joinsPrefer direct filtering or specialized service methods over complex JOIN operations, especially when maintaining or refactoring database ...

  grafana/grafana Database Go observability 2025-06-30

  copy raw open

7 more in Database, Migrations, Caching — the playbook lists the top 12.

No tool-based check applies. The review prompts below are the verification.

• minimize memory allocationsPrioritize reducing memory allocations and choosing efficient data structures to improve performance. Avoid unnecessary string/byte conve...

  gofiber/fiber Performance Optimization Go app-frameworks 2025-07-20

  copy raw open
• minimize memory allocationsPrioritize memory allocation minimization through buffer reuse, pre-allocation, and efficient data structures. Allocations are among the ...

  prometheus/prometheus Performance Optimization Go observability 2025-06-17

  copy raw open
• Bounded, Targeted PerformanceWhen optimizing performance, avoid whole-object work and unbounded resource growth. Apply these standards: 1) Targeted extraction/rewrite...

  maximhq/bifrost Performance Optimization Go llm-infra 2026-07-23

  copy raw open
• Avoid redundant operationsEliminate duplicate computations, unnecessary API calls, and redundant processing to improve performance and reduce system load. This inc...

  volcano-sh/volcano Performance Optimization Go orchestration 2025-08-04

  copy raw open
• Avoid unnecessary workOptimize performance by avoiding unnecessary computations, allocations, and operations. Use feature gates, lazy evaluation, and condition...

  kubernetes/kubernetes Performance Optimization Go orchestration 2025-07-23

  copy raw open

12 more in Performance Optimization — the playbook lists the top 12.

• Unit and integration tests Behaviour regressions on the paths the tests exercise.
  go-test 63% · 19 of 30 repos

  go test ./...copy

  exit codes, docs, alternatives, where it runs

  • Commands seengo test ./...
go test -v ./internal/command/e2etest
go test $(ESBUILD_RACE) ./cmd/... ./internal/... ./pkg/...
  • Runs inpre-commit, ci, local
  • Seen inavelino/awesome-go, ollama/ollama, fatedier/frp, grafana/grafana, prometheus/prometheus, traefik/traefik
  • Docshttps://github.com/golang/go

• Abstract model operations cleanlyWhen implementing AI model operations, create clean abstractions through interfaces that separate core mathematical operations from speci...

  ollama/ollama AI Go llm-infra 2025-02-21

  copy raw open
• Scoped Provider TransformationsWhen implementing AI/LLM request transformers (especially for proxies), make provider-specific shaping: 1) **Scoped and structured**: Clo...

  looplj/axonhub AI Go llm-infra 2026-01-24

  copy raw open

No tool-based check applies. The review prompts below are the verification.

• Observability Signal QualityWhen changing or adding metrics/traces, make signals stable, accurate, and alert-friendly. **Apply these rules before submitting:** 1) **...

  kUbernetes/kUbernetes Observability Go orchestration 2026-10-25

  copy raw open
• metrics registration lifecycleEnsure proper metrics registration and lifecycle management to maintain observability system stability. Handle metric registration/unregi...

  prometheus/prometheus Observability Go observability 2025-06-18

  copy raw open
• Log effectively for debuggingAlways include meaningful log messages at appropriate levels to aid in debugging and system monitoring. Follow these guidelines: 1. **Nev...

  opentofu/opentofu Logging Go cloud-infra 2025-06-10

  copy raw open
• Use centralized loggersAlways use centrally supplied loggers from the invocation context or configuration instead of creating new logger instances, using log.De...

  snyk/cli Logging Go security 2024-10-07

  copy raw open
• implement proper observabilityEnsure observability mechanisms (events and metrics) are implemented correctly with appropriate types, accurate labeling, and user-focuse...

  kubernetes/kubernetes Observability Go orchestration 2025-07-22

  copy raw open

23 more in Logging, Observability — the playbook lists the top 12.

• CI workflow linting Broken GitHub Actions syntax, script injection, over-broad token permissions.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• File hygiene Invalid JSON, YAML or TOML, merge markers, trailing whitespace, oversized files.
  pre-commit-hooks 3% · 1 of 30 repos autofix

  runs via pre-commit hook trailing-whitespace

  exit codes, docs, alternatives, where it runs

  • Commands seenpre-commit hook end-of-file-fixer
pre-commit hook trailing-whitespace
  • Runs inpre-commit
  • Seen inmaximhq/bifrost
  • Docshttps://github.com/pre-commit/pre-commit-hooks

• Feature-gated Configuration ConsistencyWhen adding or changing a feature-gated configuration/behavior, ensure the gate is applied consistently across *all* layers (API defaults...

  kUbernetes/kUbernetes Configurations Go orchestration 2026-10-23

  copy raw open
• Configuration validation consistencyEnsure configuration fields use consistent validation patterns, appropriate data types, and proper bounds checking. This includes using c...

  traefik/traefik Configurations Go cloud-infra 2025-04-18

  copy raw open
• Feature gate field preservationWhen implementing feature-gated fields, always preserve existing field values when the feature gate is disabled, but drop new field value...

  kubernetes/kubernetes Configurations Go orchestration 2025-07-23

  copy raw open
• Configuration mutual exclusivity validationEnsure configuration options that are mutually exclusive are properly validated with clear, actionable error messages. When introducing c...

  prometheus/prometheus Configurations Go observability 2025-06-19

  copy raw open
• Environment variable validationAlways validate environment variables and provide appropriate fallbacks when using them for configuration. Environment variables should b...

  docker/compose Configurations Go orchestration 2025-04-25

  copy raw open

24 more in CI/CD, Configurations — the playbook lists the top 12.

• Dependency audit Known-vulnerable or disallowed dependencies and licenses.
  govulncheck 10% · 3 of 30 repos

  govulncheck ./...copy

  exit codes, docs, alternatives, where it runs

  • Commands seengovulncheck -format json ./cmd/tofu
govulncheck ./...
uses golang/govulncheck-action
  • Runs inci
  • Alternativesdependency-review 3%
  • Seen inprometheus/prometheus, gofiber/fiber, opentofu/opentofu
  • Docshttps://github.com/golang/vuln
• Lockfile consistency A lockfile that no longer matches its manifest.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
  ci-matrix 43% · 13 of 30 repos

  analyze (language: 2)copy

  exit codes, docs, alternatives, where it runs

  • Commands seenanalyze (language: 2)
analyze (language: 1)
analyze (language: 3)
  • Runs inci
  • Seen inollama/ollama, gin-gonic/gin, grafana/grafana, prometheus/prometheus, traefik/traefik, evanw/esbuild
  • Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations

• Mutation testing Tests that keep passing whatever the code does.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
  ci-matrix 43% · 13 of 30 repos

  analyze (language: 2)copy

  exit codes, docs, alternatives, where it runs

  • Commands seenanalyze (language: 2)
analyze (language: 1)
analyze (language: 3)
  • Runs inci
  • Seen inollama/ollama, gin-gonic/gin, grafana/grafana, prometheus/prometheus, traefik/traefik, evanw/esbuild
  • Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations

• Comprehensive test coverageEnsure comprehensive test coverage by systematically considering all scenarios, edge cases, and feature combinations when adding or modif...

  kubernetes/kubernetes Testing Go orchestration 2025-07-23

  copy raw open
• Use testify assertion librariesReplace manual if-error checks with `testify`'s `assert` and `require` packages to make tests more readable, maintainable, and with bette...

  vitessio/vitess Testing Go data-systems 2025-02-25

  copy raw open
• Semantics-Aware Test CoverageWhen adding or modifying tests, ensure they (1) cover the minimal correctness set (including edge/error paths), (2) validate key invarian...

  kUbernetes/kUbernetes Testing Go orchestration 2026-10-23

  copy raw open
• Ensure comprehensive test coverageAll code paths, error conditions, and edge cases must have corresponding unit tests to ensure robust functionality and prevent regression...

  gofiber/fiber Testing Go app-frameworks 2025-05-31

  copy raw open
• Deterministic Test HygieneAdopt a consistent testing standard that prevents flaky behavior, leaked goroutines, and false positives. **1) Always register cleanup fo...

  maximhq/bifrost Testing Go llm-infra 2026-07-27

  copy raw open

18 more in Testing — the playbook lists the top 12.

• Docs build Broken cross-references, links and markup in documentation.

  No scanned repository in this language runs a tool for this. Lean on the review prompts.

• Spelling Typos in identifiers, comments and docs.
  codespell 10% · 3 of 30 repos

  runs via GitHub Action codespell-project/actions-codespell

  exit codes, docs, alternatives, where it runs

  • Runs inci
  • Seen inkubernetes/kubernetes, gofiber/fiber, bytedance/sonic
  • Docshttps://github.com/codespell-project/codespell

• Add explanatory commentsCode should include explanatory comments that help future maintainers understand complex logic, design decisions, field semantics, and no...

  istio/istio Documentation Go orchestration 2025-07-10

  copy raw open
• Write meaningful documentationDocumentation comments should be accurate, concise, and add genuine value rather than restating obvious code behavior. Focus on explainin...

  prometheus/prometheus Documentation Go observability 2025-06-11

  copy raw open
• Follow GoDoc conventionsDocument code following Go''s official documentation style guide (https://tip.golang.org/doc/comment). All exported functions, types, int...

  ollama/ollama Documentation Go llm-infra 2025-05-27

  copy raw open
• Document intent and limitationsClearly document the intended purpose, scope limitations, and design decisions in your code. For all exported types, functions, and varia...

  opentofu/opentofu Documentation Go cloud-infra 2025-04-18

  copy raw open
• Document Variants DeltasWhen introducing new code-path variants (e.g., “ForResize” vs base algorithms), comments/documentation must clearly explain: 1) **The del...

  kUbernetes/kUbernetes Documentation Go orchestration 2026-10-22

  copy raw open

12 more in Documentation — the playbook lists the top 12.