digitalocean/GTA

Finds Go packages that have deviated from their upstream source.

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Activelast commit May 28, 2026
License: Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned

uses: digitalocean/gta@33b0078362c19b008a2f17123cba31d3393bf6db # v0.2.0

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
repo_path	Path to the repo to check diff of	yes	—
base	Base branch to diff against	no	origin/master
include	Define changes to be filtered with a set of comma-separated prefixes	no	""
merge	Diff using the latest merge commit	no	false
json	Output list of changes as JSON	no	false
buildable_only	Keep buildable changed packages only	no	true
changed_files	Path to a file containing a newline-separated list of files that have changed	no	""
tags	A list of build tags to consider	no	""

Outputs

name	description
changed_packages	A list of packages that have deviated from the given base, either due changes within them or within their dependencies
any_changed	This value will be "true" if at least one changed package was found, "false" otherwise